GCVE - cpe:2.3:a:brainstorm_force:presto

Approved changes feed: RSS · Atom

cpe:2.3:a:brainstorm_force:presto_player:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Brainstorm Force (`ed596997-4e58-5bba-8739-dbf2a1ffb70e`)
Product	Presto Player (`7539cfb3-ec47-57ca-b299-68f3cf8363dc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-109893`	vulnerable	2026-11-03 10:17:40.095691	WordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affects Presto Player: from n/a through 4.5.3. Published: 2026-10-15T18:18:56.045Z Updated: 2026-10-16T17:12:08.141Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/presto-player/vulnerability/wordpress-presto-player-plugin-4-5-3-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-45442`	vulnerable	2026-06-08 08:05:11.762894	WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability MEDIUM (4.3) Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3. Published: 2026-05-19T10:54:55.655Z Updated: 2026-05-19T13:34:22.246Z Open on db.gcve.eu Reference links https://patchstack.com/database/wordpress/plugin/presto-player/vulnerability/wordpress-presto-player-plugin-4-1-3-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.