Browse all 5 CVE security advisories affecting Passionate Brains. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Passionate Brains develops security testing tools and penetration services, focusing on identifying vulnerabilities in web applications and network infrastructure. Historically, they have commonly reported Remote Code Execution (RCE), Cross-Site Scripting (XSS), and privilege escalation flaws, particularly in custom-built systems. Their security characteristics emphasize thorough manual testing combined with automated scanning. While no major public incidents are directly attributed to them, their CVE contributions highlight systemic weaknesses in client applications. Their work often exposes authentication bypasses and insecure deserialization issues, demonstrating a consistent focus on high-impact vulnerabilities that could lead to complete system compromise.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-68032 | WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability — Advanced WC AnalyticsCWE-862 | 6.5 | Medium | 2026-02-20 |
| CVE-2025-68028 | WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability — GA4WP: Google Analytics for WordPressCWE-862 | 6.5 | Medium | 2026-02-20 |
| CVE-2026-24633 | WordPress Add Expires Headers & Optimized Minify plugin <= 3.2.0 - Broken Access Control vulnerability — Add Expires Headers & Optimized MinifyCWE-862 | 5.3 | Medium | 2026-01-23 |
| CVE-2026-22517 | WordPress GA4WP: Google Analytics for WordPress plugin <= 2.10.0 - Broken Access Control vulnerability — GA4WP: Google Analytics for WordPressCWE-862 | 5.4 | Medium | 2026-01-08 |
| CVE-2023-27457 | WordPress Add Expires Headers & Optimized Minify Plugin <= 2.7 is vulnerable to Cross Site Request Forgery (CSRF) — Add Expires Headers & Optimized MinifyCWE-352 | 4.3 | Medium | 2023-11-22 |
This page lists every published CVE security advisory associated with Passionate Brains. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.