目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

Brainstorm Force 厂商漏洞列表 / CVE 中文分析 62

Brainstorm Force 厂商相关 62 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Brainstorm Force 是知名的 WordPress 插件开发商，其核心产品包括 Elementor 等页面构建工具。截至最新统计，该厂商已关联 62 条 CVE，历史漏洞多集中于存储型 XSS、越权访问及未授权的文件包含。其安全事件常涉及插件更新滞后导致的已知风险利用。尽管部分产品具备基础安全机制，但开发者需关注代码审计与及时补丁，以防范因第三方组件集成引发的潜在攻击面扩大。

Top products by Brainstorm Force: Spectra Ultimate Addons for WPBakery ConvertPlus Astra Widgets Starter Templates Ultimate Addons for WPBakery Page Builder CartFlows Astra Bulk Edit OttoKit Ultimate Addons for Elementor Ultimate Addons for Beaver Builder Spectra Pro SureDash Ultimate Addons for Beaver Builder – Lite Starter Templates — Elementor, WordPress & Beaver Builder Templates ProjectHuddle Client Site SureRank SureMembers Sigmize SureForms Pro Convert Pro Pre-Publish Checklist Premium Starter Templates Astra WP Remote Site Search Astra Pro Spectra – WordPress Gutenberg Blocks Schema – All In One Schema Rich Snippets
CVE ID标题CVSS风险等级Published
CVE-2026-42648 WordPress Plugin Spectra 安全漏洞 — SpectraCWE-862 4.3 Medium2026-04-29
CVE-2026-42377 WordPress Plugin SureForms Pro 安全漏洞 — SureForms ProCWE-862 7.3 High2026-04-29
CVE-2026-39477 WordPress plugin CartFlows 安全漏洞 — CartFlowsCWE-862 4.3 Medium2026-04-08
CVE-2026-39479 WordPress plugin OttoKit SQL注入漏洞 — OttoKitCWE-89 7.6 High2026-04-08
CVE-2026-34889 WordPress Plugin Ultimate Addons for WPBakery Page Builder 跨站脚本漏洞 — Ultimate Addons for WPBakery Page BuilderCWE-79 6.5 Medium2026-04-01
CVE-2026-32431 WordPress plugin Astra Bulk Edit 跨站脚本漏洞 — Astra Bulk EditCWE-79 6.5 Medium2026-03-13
CVE-2026-25316 WordPress plugin CartFlows 代码问题漏洞 — CartFlowsCWE-502 7.2 High2026-02-19
CVE-2026-24982 WordPress plugin Spectra 安全漏洞 — SpectraCWE-862 5.3 Medium2026-02-03
CVE-2026-24962 WordPress plugin Sigmize 跨站请求伪造漏洞 — SigmizeCWE-352 4.3 Medium2026-02-03
CVE-2025-68497 WordPress plugin Astra Widgets 安全漏洞 — Astra WidgetsCWE-79 5.9 Medium2025-12-24
CVE-2023-23729 WordPress plugin Spectra 安全漏洞 — SpectraCWE-862 5.4 Medium2025-12-09
CVE-2025-62059 WordPress plugin SureRank 安全漏洞 — SureRankCWE-79 7.1 High2025-11-06
CVE-2025-11814 WordPress plugin Ultimate Addons for WPBakery 跨站脚本漏洞 — Ultimate Addons for WPBakeryCWE-79 6.4 Medium2025-10-16
CVE-2025-48164 WordPress plugin SureDash 安全漏洞 — SureDashCWE-266 8.8 High2025-08-20
CVE-2025-54685 WordPress plugin SureDash 安全漏洞 — SureDashCWE-201 6.5 Medium2025-08-14
CVE-2025-27007 WordPress plugin SureTriggers 安全漏洞 — OttoKitCWE-266 9.8 Critical2025-05-01
CVE-2024-12434 WordPress plugin SureMembers 信息泄露漏洞 — SureMembersCWE-200 5.3 Medium2025-02-26
CVE-2024-13800 WordPress plugin ConvertPlus 安全漏洞 — ConvertPlusCWE-862 8.1 High2025-02-12
CVE-2025-24568 WordPress plugin Starter Templates 跨站请求伪造漏洞 — Starter TemplatesCWE-352 4.3 Medium2025-01-24
CVE-2024-56274 WordPress plugin Astra Widgets 跨站脚本漏洞 — Astra WidgetsCWE-79 6.5 Medium2025-01-07
CVE-2023-23834 WordPress plugin Spectra 安全漏洞 — SpectraCWE-862 4.3 Medium2024-12-09
CVE-2023-23825 WordPress plugin Spectra 安全漏洞 — SpectraCWE-862 3.1 Low2024-12-09
CVE-2024-37517 WordPress plugin Spectra 安全漏洞 — SpectraCWE-862 4.3 Medium2024-11-01
CVE-2024-50439 WordPress plugin Astra Widgets 跨站脚本漏洞 — Astra WidgetsCWE-79 6.5 Medium2024-10-28
CVE-2024-47345 WordPress plugin Starter Templates 跨站脚本漏洞 — Starter TemplatesCWE-79 5.9 Medium2024-10-06
CVE-2024-43151 WordPress plugin Ultimate Addons for Beaver Builder – Lite 跨站脚本漏洞 — Ultimate Addons for Beaver Builder – LiteCWE-79 6.5 Medium2024-08-12
CVE-2024-7590 WordPress plugin Spectra 跨站脚本漏洞 — SpectraCWE-79 6.5 Medium2024-08-12
CVE-2024-3827 WordPress plugin Spectra Pro 安全漏洞 — Spectra ProCWE-79 6.4 Medium2024-08-02
CVE-2024-5251 WordPress plugin Ultimate Addons for WPBakery 安全漏洞 — Ultimate Addons for WPBakeryCWE-79 6.4 Medium2024-07-17
CVE-2024-5253 WordPress plugin Ultimate Addons for WPBakery 安全漏洞 — Ultimate Addons for WPBakeryCWE-79 6.4 Medium2024-07-17

本页汇总了 Brainstorm Force 厂商截至目前公开的全部 62 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。