Brave vulnerabilities
We track 2 vulnerabilities in Brave products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 2, 2025.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest Brave vulnerabilities
- 9.8 Critical severity
Brave Conversion Engine (PRO): Authentication Bypass Using an Alternate Path or Channel
The Brave Conversion Engine (PRO) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 0.7.7. This is due to the plugin not properly restricting a claimed identity while authenticating with Facebook. This makes it p
- 7.5 High severity
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the…
In Brave Android prior to v1.67.116, domains in the Brave Shields popup are elided from the right instead of the left, which may lead to domain confusion.