Advisories · Technology

Brainstorm Force Presto Player.

Every CVE that names Brainstorm Force Presto Player among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109893 CVE record

CVSS 6.5 Medium

WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force Presto Player
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-102914 CVE record

CVSS 6.5 Medium

WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability
- Brainstorm Force Presto Player
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2026
CVE-2026-45442 CVE record

CVSS 4.3 Medium

WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability
- Brainstorm Force Presto Player
- Broken access control
Not analysed yet 19 May 2026