Vulnerabilidades en Brainstorm Force

68 resultados
Análisis Vexday

Com 66 CVEs catalogadas e nenhuma entrada no catálogo KEV da CISA, o histórico de Brainstorm Force apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere menor pressão imediata de agentes maliciosos em comparação ao universo amplo de vendors monitorados. Ainda assim, o cenário exige atenção: 9 vulnerabilidades surgiram nos últimos 90 dias, 3 são classificadas como críticas e a CVE mais perigosa ativa no momento, CVE-2025-27007, registra EPSS de 0,5019 — indicando probabilidade relevante de exploração no curto prazo. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), padrão que, embora frequentemente subestimado, pode ser encadeado com outras fraquezas para ampliar o impacto de um ataque. A presença de PoC pública para ao menos uma CVE reforça a necessidade de aplicação prioritária de patches, especialmente para instalações expostas à internet.

CVE-2024-5254MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5252MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5253MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5255MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-5251MEDIUMUltimate Addons for WPBakery Page Builder <= 3.19.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2023-23735MEDIUMWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Unauthenticated Email HTML Injection VulnerabilityEPSS 0.3%CVE-2026-39479HIGHWordPress OttoKit plugin <= 1.1.20 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-3827MEDIUMSpectra Pro <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block IDsEPSS 0.3%CVE-2023-51376MEDIUMWordPress ProjectHuddle Client Site plugin <= 1.0.34 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-11814MEDIUMUltimate Addons for WPBakery Page Builder < 3.21.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-43151MEDIUMWordPress Ultimate Addons for Beaver Builder – Lite plugin <= 1.5.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-47345MEDIUMWordPress Starter Templates plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2022-46851MEDIUMWordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-25058MEDIUMWordPress Schema – All In One Schema Rich Snippets Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-23729MEDIUMWordPress Spectra – WordPress Gutenberg Blocks plugin <= 2.3.0 - Contributor+ reCAPTCHA Settings Change VulnerabilityEPSS 0.2%CVE-2024-50439MEDIUMWordPress Astra Widgets plugin <= 1.2.14 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-45442MEDIUMWordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-42377HIGHWordPress SureForms Pro plugin <= 2.8.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24982MEDIUMWordPress Spectra plugin <= 2.19.17 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-62059HIGHWordPress SureRank plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%