Brevo
4 CVEs across 4 Brevo products. Browse Brevo vulnerabilities, severities, and proof-of-concept exploits.
Brevo products with known CVEs
Brevo CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-66128 | Medium | 5.3 | 2025-12-16 | Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured… |
CVE-2024-8477 | Medium | 4.3 | 2024-10-10 | The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all… |
CVE-2024-43287 | Medium | 4.3 | 2024-08-26 | Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMT… |
CVE-2024-35668 | High | 7.1 | 2024-06-04 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscr… |
CVE-2024-32807 | High | 8.5 | 2024-05-06 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brevo Sendinblue for WooCommerce allows Relative Path Traversal… |
CVE-2023-26859 | Critical | 9.8 | 2023-07-26 | SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privileges via the ajaxOrderTracking.php compone… |
CVE-2023-2472 | Medium | 6.1 | 2023-06-05 | The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputti… |
CVE-2021-24874 | Medium | 6.1 | 2022-02-14 | The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before output… |
CVE-2021-24923 | Medium | 6.1 | 2022-01-24 | The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape the sib-statistics-date parameter before… |