What’s Vulnerable › Products

Brainstorm Force CartFlows vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Brainstorm Force CartFlows version is affected

Latest Brainstorm Force CartFlows vulnerabilities

• CVE-2026-96837 — WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability (CVSS 8.8)
• CVE-2026-39477 — WordPress CartFlows plugin <= 2.2.3 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-25316 — WordPress CartFlows plugin <= 2.1.19 - PHP Object Injection vulnerability (CVSS 7.2)
• CVE-2023-36685 — WordPress CartFlows Pro Plugin <= 1.11.12 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)