Skip to content
OpenAdvisories

Vendor

neeraj_slit

4 known vulnerabilities.

Products

Brevo – Email, SMS, Web Push, Chat, and more. 3 Brevo for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-14436

    Brevo for WooCommerce <= 4.0.49 - Unauthenticated Stored Cross-Site Scripting

    The Brevo for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user_connection_id’ parameter in all versions up to, and including, 4.0.49 due to insufficient input sanitization and output escaping. This makes it possible …

    neeraj_slit Brevo for WooCommerce Web / CMS