WordPress Brave plugin < 0.8.6 - Subscriber+ Unpublished Popup Disclosure vulnerability

Subscriber+ Unpublished Popup Disclosure vulnerability discovered by Huseyin Mertoglu in WordPress Plugin Brave versions 0.8.6...

WordPress Brave plugin missing authorization vulnerability

WordPress Brave plugin by Brave Software develops Brave Browser Extensions for WordPress integration. A lack of authorization vulnerability exists in the WordPress Brave plugin, which can be exploited by an attacker to cause the exploitation of a misconfigured access control security level...

CVE-2025-68508

CVE-2025-68508 affects the WordPress Brave plugin’s brave-popup-builder component (Brave Brave plugin) up to version 0.8.3. The root cause is missing/incorrect authorization due to misconfigured access control levels, enabling a broken access control vulnerability. Reported details across multipl...

CVE-2025-68508 WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through = 0.8.3...

WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Brave versions = 0.8.3...

WordPress Brave Popup Builder Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.7.0 Fixed in 0.7.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43337 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 04312f740763 Credits Ananda Dhakal...

WordPress Brave Popup Builder Plugin <= 0.6.9 is vulnerable to Cross Site Scripting (XSS)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.9 Fixed in 7.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-35655 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 529027c4f5e6 Credits savphill Required privilege...

WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.2 Fixed in 0.6.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-51534 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5a6ce464d1fb Credits Huynh Tien Si Required privilege...