Advisories · Technology

Brainstorm Force CartFlows.

Every CVE that names Brainstorm Force CartFlows among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96837 CVE record

CVSS 8.8 High

WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability
- Brainstorm Force CartFlows
- File inclusion
Not analysed yet 30 Sept 2026
CVE-2026-39477 CVE record

CVSS 4.3 Medium

WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability
- Brainstorm Force CartFlows
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2026-25316 CVE record

CVSS 7.2 High

WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability
- Brainstorm Force CartFlows
- Insecure deserialization
Not analysed yet 19 Feb 2026