All packages
Brave Popup Builder vulnerabilities
3 known CVE vulnerabilities in Brave Popup Builder, translated and rated.
- CVE-2026-48202Medium
The Brave Popup Builder WordPress plugin (Brave) through version 0.8.8 contains a Basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection into the page.
- CVE-2026-77116Medium
The Brave Popup Builder plugin up to version 0.8.5 has a broken access control issue. Any logged-in user, even Subscriber or WooCommerce Customer, can read popup content they shouldn't have access to by passing a post ID in the URL.
- CVE-2026-77115High
The Brave Popup Builder plugin up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them, which can lead to Reflected XSS attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS