Vendor

Brainstorm Force

3 briefs RSS Subscribe to Brainstorm Force alerts

Brainstorm Force SureCart: Stored Cross-Site Scripting (CVE-2026-112221)

A stored cross-site scripting (XSS) vulnerability in the Brainstorm Force SureCart plugin (versions 4.9.5 and earlier) due to improper neutralization of input during web page generation.

SureCart

1c 3w ago

critical advisory

Privilege Escalation in Brainstorm Force OttoKit suretriggers

1 TTP 1 CVE

An incorrect privilege assignment vulnerability in the Brainstorm Force OttoKit suretriggers plugin allows remote attackers to escalate privileges on affected installations.

OttoKit

1t 1c 3w ago

high advisory

CVE-2026-87741: Deserialization Vulnerability in WordPress ConvertPlus Plugin

2 TTPs 1 CVE

An authenticated deserialization vulnerability in ConvertPlus <= 3.6.3 allows subscribers to inject arbitrary PHP objects via the cp_display_preview_modal AJAX action.

ConvertPlus wordpress deserialization web-vulnerability

2t 1c Sep 28, 2026