Vulnerabilities > Brainstormforce > Starter Templates

DATE CVE VULNERABILITY TITLE RISK
2024-06-19 CVE-2023-41805 Missing Authorization vulnerability in Brainstormforce Starter Templates
Missing Authorization vulnerability in Brainstorm Force Premium Starter Templates, Brainstorm Force Starter Templates astra-sites.This issue affects Premium Starter Templates: from n/a through 3.2.5; Starter Templates: from n/a through 3.2.5.
network
low complexity
brainstormforce CWE-862
6.5
2023-12-07 CVE-2023-41804 Server-Side Request Forgery (SSRF) vulnerability in Brainstormforce Starter Templates
Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.This issue affects Starter Templates — Elementor, WordPress & Beaver Builder Templates: from n/a through 3.2.4.
network
low complexity
brainstormforce CWE-918
5.4
2023-05-23 CVE-2022-46851 Cross-Site Request Forgery (CSRF) vulnerability in Brainstormforce Starter Templates
Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Starter Templates plugin <= 3.1.20 versions.
network
low complexity
brainstormforce CWE-352
8.8
2021-11-17 CVE-2021-42360 Resource Injection vulnerability in Brainstormforce Starter Templates
On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which includes Contributor-level users, to import blocks onto any page using the astra-page-elementor-batch-process AJAX action.
3.5