CVE-2026-77116
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
The Brave Popup Builder plugin up to version 0.8.5 has a broken access control issue. Any logged-in user, even Subscriber or WooCommerce Customer, can read popup content they shouldn't have access to by passing a post ID in the URL.
Risk Assessment
Logged-in users with low privileges can access popup content that may contain sensitive information or be intended only for specific groups.
Recommendation
Update the Brave Popup Builder plugin to a version newer than 0.8.5 that fixes the access control issue.
Other vulnerabilities in Brave Popup Builder
See all- CVE-2026-48202Medium
The Brave Popup Builder WordPress plugin (Brave) through version 0.8.8 contains a Basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection into the page.
- CVE-2026-77115High
The Brave Popup Builder plugin up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them, which can lead to Reflected XSS attacks.
Original NVD description (English source)
Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS