40 matches found
EUVD-2026-64639
Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...
CVE-2026-77116
Brave Popup Builder (WordPress plugin, slug: brave-popup-builder) is affected by a broken access control vulnerability in versions through 0.8.5 . Any authenticated user with a low-privilege role (Subscriber or WooCommerce Customer) can read unpublished popup content by passing a post ID in the U...
CVE-2026-77115
Brave Popup Builder (brave-popup-builder), a WordPress plugin, is vulnerable to unauthenticated reflected XSS in versions up to 0.8.5 . The root cause is that UTM query parameters are reflected into the popup form HTML without proper escaping, allowing an attacker to inject arbitrary JavaScript v...
EUVD-2026-64638
Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...
CVE-2025-68508
Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...
CVE-2025-68508
CVE-2025-68508 affects the WordPress Brave plugin’s brave-popup-builder component (Brave Brave plugin) up to version 0.8.3. The root cause is missing/incorrect authorization due to misconfigured access control levels, enabling a broken access control vulnerability. Reported details across multipl...
EUVD-2024-40227
Malicious code in bioql PyPI...
EUVD-2024-28374
Malicious code in bioql PyPI...
EUVD-2024-35414
Malicious code in bioql PyPI...
CVE-2024-30453
Server-Side Request Forgery SSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5...
CVE-2024-35655
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brave Brave brave-popup-builder allows DOM-Based XSS.This issue affects Brave: from n/a through = 0.6.9...
CVE-2024-43337
Cross-Site Request Forgery CSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0...
BIT-WORDPRESS-2024-43337
Cross-Site Request Forgery CSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0...
BIT-WORDPRESS-MULTISITE-2024-43337
Cross-Site Request Forgery CSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0...
CVE-2024-43337
Cross-Site Request Forgery CSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0...
CVE-2024-43337
Cross-Site Request Forgery CSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0...
CVE-2024-43337 WordPress Brave plugin <= 0.7.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0...
CVE-2024-43337
CVE-2024-43337 is a CSRF vulnerability in Brave Popup Builder (WordPress plugin). Affected versions: Brave Popup Builder 0.7.0 and earlier. The issue is documented with corroborating sources (e.g., PT-2024-30503) indicating the vulnerability exists in Brave Popup Builder and recommending upgradin...
PT-2024-30503 · Brave · Brave Popup Builder
Name of the Vulnerable Software and Affected Versions: Brave Popup Builder versions 0.7.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application th...
WordPress plugin Brave Popup Builder 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...