Advisories · Technology
Brainstorm Force ConvertPlus.
Every CVE that names Brainstorm Force ConvertPlus among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter
- Brainstorm Force ConvertPlus
- Command injection
- CVSS 8.1 High
Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
- Brainstorm Force ConvertPlus
- Broken access control
- CVSS 7.5 High
ConvertPlus <= 3.5.26 - Authenticated (Contributor+) PHP Object Injection
- Brainstorm Force ConvertPlus
- Insecure deserialization
- CVSS 8.8 High
ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
- Brainstorm Force ConvertPlus
- Insecure deserialization
- CVSS 5.4 Medium
ConvertPlug <= 3.5.25 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
- Brainstorm Force ConvertPlus
- Broken access control