Skip to content
OpenAdvisories

Vendor

Brave

12 known vulnerabilities.

Products

Brave 3 Brave Popup Builder 2 Desktop Browser 2 Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content 1 Android Browser 1 Brave Browser Android 1 brave-browser 1 Brave Conversion Engine (PRO) 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48202

    WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave brave-popup-builder allows Code Injection.This issue affects Brave: from n/a through 0.8.8.

    Brave Brave
  • Medium 5.3
    CVE-2025-68508

    WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Brave Brave brave-popup-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Brave: from n/a through <= 0.8.3.

    Brave Brave
  • Medium 6.5
    CVE-2025-48980

    In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split Vi…

    Brave Desktop Browser
  • Medium 6.1
    CVE-2025-23086

    On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-pr…

    Brave Desktop Browser
  • Medium 4.3
    CVE-2024-43337

    WordPress Brave plugin <= 0.7.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.7.0.

    Brave Brave Popup Builder
  • Medium 5.9
    CVE-2024-35655

    WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brave Brave brave-popup-builder allows DOM-Based XSS.This issue affects Brave: from n/a through <= 0.6.9.

    Brave Brave
  • Medium 5.4
    CVE-2024-30453

    WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5.

    Brave Brave Popup Builder
  • Medium 5.9
    CVE-2023-51534

    WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brave Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content allows Stored XSS.This issue affects Brave – Create Popup,…

    Brave Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content
  • Medium 4.3
    CVE-2021-21323

    Regression in DNS leakage from Tor windows

    Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enab…

    Brave brave-browser