CVE-2026-32476: WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

Q: Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or plugin-specific privileges. Exploitation still requires user interaction.

Q: What impact can successful exploitation have?

Successful XSS can affect confidentiality, integrity, and availability at a low level, and the scope is changed. The supplied vector indicates network reachability with low attack complexity.

Q: Which plugin versions are affected?

Brave Conversion Engine (PRO) versions 0.8.6 and earlier are identified as affected.

Published Aug 24, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Brave Conversion Engine (PRO) <= 0.8.6 versions.

Affected Software

1 affected component

WordPress Brave Conversion Engine (PRO)<=0.8.6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Brave Conversion Engine (PRO) plugin to a version that resolves this vulnerability.
Fixed in 0.8.7

Event History

Aug 24, 2026

CVE Published

via MITRE·11:54 AM

Data Sourced

via MITRE·11:54 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The vulnerability is unauthenticated, so an attacker does not need a WordPress account or plugin-specific privileges. Exploitation still requires user interaction.

What impact can successful exploitation have?

Successful XSS can affect confidentiality, integrity, and availability at a low level, and the scope is changed. The supplied vector indicates network reachability with low attack complexity.

Which plugin versions are affected?

Brave Conversion Engine (PRO) versions 0.8.6 and earlier are identified as affected.

CVE-2026-32476: WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact can successful exploitation have?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact can successful exploitation have?

Which plugin versions are affected?