Brave vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20245
3. 20254
4. 20261

Newest CVEs

• CVE-2026-48202

  WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability

  Brave · Brave

  Medium5.3
• CVE-2025-68508

  WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerability

  Brave · Brave

  Medium5.3
• CVE-2025-48980

  In Brave Browser Desktop versions prior to 1.83.10 that have the split view feature enabled, the "Open Link in Split View" context menu item did not respect…

  Brave · Desktop Browser

  Medium6.5
• CVE-2025-7710

  Brave Conversion Engine (PRO) <= 0.7.7 - Authentication Bypass to Administrator

  Brave · Brave Conversion Engine (PRO)

  Critical9.8
• CVE-2025-23086

  On most desktop platforms, Brave Browser versions 1.70.x-1.73.x included a feature to show a site's origin on the OS-provided file selector dialog when a site…

  Brave · Desktop Browser

  Medium6.1
• CVE-2024-37406

  In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.

  Brave · Android Browser

  High7.5
• CVE-2024-43337

  WordPress Brave plugin <= 0.7.0 - Cross Site Request Forgery (CSRF) vulnerability

  Brave · Brave Popup Builder

  Medium4.3
• CVE-2024-35655

  WordPress Brave – Interactive Content plugin <= 0.6.9 - Cross Site Scripting (XSS) vulnerability

  Brave · Brave

  Medium5.9
• CVE-2024-30453

  WordPress Brave plugin <= 0.6.5 - Server Side Request Forgery (SSRF) vulnerability

  Brave · Brave Popup Builder

  Medium5.4
• CVE-2023-51534

  WordPress Brave Popup Builder Plugin <= 0.6.2 is vulnerable to Cross Site Scripting (XSS)

  Brave · Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content

  Medium5.9