WordPress Brave plugin missing authorization vulnerability

WordPress Brave plugin by Brave Software develops Brave Browser Extensions for WordPress integration. A lack of authorization vulnerability exists in the WordPress Brave plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access control security level...

CVE-2025-68508

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...

EUVD-2025-205207

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...

CVE-2025-68508

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...

CVE-2025-68508

CVE-2025-68508 affects the WordPress Brave plugin’s brave-popup-builder component (Brave Brave plugin) up to version 0.8.3. The root cause is missing/incorrect authorization due to misconfigured access control levels, enabling a broken access control vulnerability. Reported details across multipl...

CVE-2025-68508 WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...

CVE-2025-68508 WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...

WordPress plugin Brave 安全漏洞

WordPress Brave plugin by Brave Software develops Brave Browser Extensions for WordPress integration. A lack of authorization vulnerability exists in the WordPress Brave plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access control security level...

PT-2025-53080

Name of the Vulnerable Software and Affected Versions Brave versions through 0.8.3 Description A missing authorization issue exists in Brave's brave-popup-builder component. This allows exploitation due to incorrectly configured access control security levels. Recommendations Update to a version...

WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Brave versions = 0.8.3...

Brave Android 1.85.112 Security Fixes

Enabled WASM Interpreter when JIT is disabled. Upgraded Chromium to 143.0.7499.52 — refer to Google Chrome advisories for inherited CVEs...

Brave Desktop 1.85.111 Security Fixes

Improved IKEv2 VPN configuration parameters on Windows. - Enabled WASM Interpreter when JIT is disabled. Upgraded Chromium to 143.0.7499.40 — refer to Google Chrome advisories for inherited CVEs...

MAL-2025-138597 Malicious code in brave-brown-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave-brown-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec287c63714917f82e893b8f31fad405c761ca5bd1f8daececd1e65776905e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117505

Malicious code in brave-brown-bovid npm...

EUVD-2025-106341

Malicious code in braveporcupinez3n npm...

EUVD-2025-77414

Malicious code in bravebooby-appteadev npm...

MAL-2025-100083 Malicious code in brave_booby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1afd2e04705548b79b3516eda579e04bd49f9d54fac21a43ca78ff2450e3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79695

Malicious code in bravecrocodilez3n npm...

Malicious code in brave_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bcf2e977ff77c7daa53a934742473e5c38fef78bbcd1adbdb4664c8127d2df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...