Brevo vulnerabilities

Products

• Newsletter\, Smtp\, Email Marketing And Subscribe 5
• Newsletter, Smtp, Email Marketing And Subscribe Forms By Sendinblue 5
• Sendinblue For Woocommerce 2

Newest

• brevo sendinblue for woocommerce WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability CVE-2025-66128 5.3 MediumDecember 16, 2025
• brevo newsletter\, smtp\, email marketing and subscribe, neeraj slit brevo – email, sms, web push, chat, and more. +1 more Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery CVE-2024-8477 4.3 MediumOctober 10, 2024
• brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, sendinblue newsletter\, smtp\, email marketing and subscribe +1 more WordPress Brevo plugin <= 3.1.82 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-43287 4.3 MediumAugust 26, 2024
• brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 more WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-35668 7.1 HighJune 4, 2024
• brevo sendinblue for woocommerce WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability CVE-2024-32807 8.5 HighMay 6, 2024
• brevo SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote... CVE-2023-26859 9.8 CriticalJuly 26, 2023
• brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 more Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS CVE-2023-2472 6.1 MediumJune 5, 2023
• brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 more Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting CVE-2021-24874 6.1 MediumFebruary 14, 2022
• brevo newsletter, smtp, email marketing and subscribe forms by sendinblue, newsletter\, smtp\, email marketing and subscribe +1 more Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS CVE-2021-24923 6.1 MediumJanuary 24, 2022