Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3pv4-5j2g-fvvj

Опубликовано: 23 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.

EPSS

Процентиль: 6%
0.00165
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
6 дней назад

Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.

EPSS

Процентиль: 6%
0.00165
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639