PLUGIN SECURITY
Is Brave Popup Builder safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Brave Popup Builder WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
brave-popup-builder - Requires PHP: 7.2.24+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.6.3 [CVE-2023-51534, WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS), Brave Popup Builder <= 0.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting, Brave Popup Builder < 0.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting]
- Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.6.6 [CVE-2024-30453, WordPress Brave Popup Builder Plugin <= 0.6.5 is vulnerable to Server Side Request Forgery (SSRF), Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery, Brave Popup Builder < 0.6.6 - Unauthenticated Server-Side Request Forgery]
- Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.7.0 [CVE-2024-35655, WordPress Brave Popup Builder Plugin <= 0.6.9 is vulnerable to Cross Site Scripting (XSS), Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content <= 0.6.9 - Authenticated (Admin+) Stored Cross-Site Scripting]
- Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.7.1 [CVE-2024-43337, WordPress Brave Popup Builder Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF), Brave Popup Builder <= 0.7.0 - Cross-Site Request Forgery]
- Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content [brave-popup-builder] < 0.8.4 [CVE-2025-68508, Brave <= 0.8.3 - Missing Authorization]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Hostinger Reach – AI-Powered Email Marketing for WordPress — 1000000+ active installs — max PHP 8.4
- Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation — 1000000+ active installs — max PHP 8.4
- Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder — 700000+ active installs — max PHP 8.4
- CartFlows – Funnel Builder & Checkout Plugin for WooCommerce — 200000+ active installs — max PHP 8.4
- Popup Builder – Create highly converting, mobile friendly marketing popups. — 200000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.