Security Advisory

CVE-2026-77116

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-23 06:00:18

Last updated 2026-08-23 15:32:06

Assigner WPScan

CVSS score 4.3

State PUBLISHED

Description

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.

← Browse all CVEs View on cve.org ↗