CVE-2026-77116

MediumCVSS 4.3

Published: 23/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 23/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

The Brave Popup Builder plugin up to version 0.8.5 has a broken access control issue. Any logged-in user, even Subscriber or WooCommerce Customer, can read popup content they shouldn't have access to by passing a post ID in the URL.

Risk Assessment

Logged-in users with low privileges can access popup content that may contain sensitive information or be intended only for specific groups.

Recommendation

Update the Brave Popup Builder plugin to a version newer than 0.8.5 that fixes the access control issue.

Other vulnerabilities in Brave Popup Builder

CVE-2026-77115High
The Brave Popup Builder plugin up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them, which can lead to Reflected XSS attacks.

Original NVD description (English source)

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.