Lovense controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile4 entries
2025
Further account and identity vulnerabilities
Researchers reported another username-to-email exposure method involving XMPP manipulation as well as an account-takeover issue. Lovense stated that both issues were fixed and that there had been no data breach, unlawful access, or misuse.
2023
Account takeover and identity-exposure vulnerabilities
Security researcher Krissy reported critical issues that could enable account takeover and convert email addresses to usernames and vice versa. Lovense said the vulnerabilities were fixed and paid a reported bug bounty.
2017
Android application audio-recording bug
Users reported that the Android application recorded audio during use and stored files locally without clear user awareness. Lovense characterized the issue as a software bug and released an update, stating that audio was not transmitted to its servers.
2016
Email enumeration and disclosure vulnerabilities
The Internet of Dongs Project reported vulnerabilities involving email enumeration and disclosure in a Lovense application. Lovense implemented remediation measures and became a trusted partner vendor in the project’s disclosure program.