Advisories · Technology
Brave.
Every CVE that names Brave among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability
- Brave
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
- Brave
- Other injection
- CVSS 4.3 Medium
Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
- Brave
- Broken access control
- CVSS 7.1 High
Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters
- Brave
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability
- Brave
- Broken access control
- CVSS 5.9 Medium
WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability
- Brave
- Cross-site scripting (XSS)