VendorsBrevonewsletter%5C%2C_smtp%5C%2C_email_marketing_and_subscribeall versions
Vulnerabilities

Brevo Newsletter, SMTP, Email marketing and Subscribe

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

5CVEs
CVE-2024-35668
WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-06-04 · Modified
7.1EPSS 0.003
CVE-2021-24923
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS
Published 2022-01-24 · Modified
6.1EPSS 0.008
CVE-2021-24874
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting
Published 2022-02-14 · Modified
6.1EPSS 0.008
CVE-2023-2472
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
Published 2023-06-05 · Modified
6.1EPSS 0.005
CVE-2024-8477
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery
Published 2024-10-10 · Analyzed
4.3EPSS 0.002