WP Clinic
Log in Sign up

CVE · Medium

CVE-2025-68508 — Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.8.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-68508 Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.8.4 Missing Authorization Medium 5.3 < 0.8.4 0.8.4 2025-12-23

CVE-2025-68508

The Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 0.8.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.