Skip to content
OpenAdvisories

Vendor

Brevo

4 known vulnerabilities.

Products

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue 2 Sendinblue for WooCommerce 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2024-35668

    WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing an…

    Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue
  • High 8.5
    CVE-2024-32807

    WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brevo Sendinblue for WooCommerce allows Relative Path Traversal, Manipulating Web Input to File System Calls.This issue affects Sendinblue for WooCommerce: from n/…

    Brevo Sendinblue for WooCommerce Web / CMS