Brevo vulnerabilities
4 published CVEs name Brevo among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-66128
WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability
Brevo · Sendinblue for WooCommerce
Medium5.3 - CVE-2024-43287
WordPress Brevo plugin <= 3.1.82 - Cross Site Request Forgery (CSRF) vulnerability
Brevo · Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue
Medium4.3 - CVE-2024-35668
WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability
Brevo · Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue
High7.1 - CVE-2024-32807
WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability
Brevo · Sendinblue for WooCommerce
High8.5