plugin

Bravepopup Pro Vulnerabilities

2 known security issues reported for the Bravepopup Pro WordPress plugin. Most recent disclosed Aug 24, 2026.

1 critical 1 high

Running Bravepopup Pro on your site? Check whether your installed version is affected.

Scan your site free

Brave Conversion Engine (PRO) <= 0.8.6 - Unauthenticated Stored Cross-Site Scripting

high

The Brave Conversion Engine (PRO) plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 0.8.6. This is due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will exe...

CVSS:
7.2
(Wordfence)
Affected:
up to 0.8.6
Fixed in:
0.8.7
Disclosed:
Aug 24, 2026

CVE-2026-32476 on NVD →

Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator

critical

The Brave Conversion Engine (PRO) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it possible for unauthenticated attackers to log in as other use...

CVSS:
9.8
(Wordfence)
Affected:
up to 0.7.7
Fixed in:
0.8.0
Disclosed:
Aug 1, 2025

CVE-2025-7710 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database