anonhaven

CVE-2026-77116

NONE EPSS 0.18%
Updated Aug 23, 2026
Unknown
Parameter Value
Type CWE-639 Authorization Bypass Through User-Controlled Key
Vendor Unknown
Public PoC No

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.

Weakness Type (CWE)

CWE-639 Authorization Bypass Through User-Controlled Key

Vulnerable Products

unknown:brave

References 1

https://wpscan.com/vulnerability/db0a775c-cbac-4918-8b10-75f4fb2d716a/
contact@wpscan.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-77115

Unknown

None

CVE-2026-77003

WordPress

None

CVE-2026-14853

WordPress

None

CVE-2026-13598

WordPress

None

CVE-2026-16260

Unknown

None