CVE-2024-8477
Published Oct 10, 2024The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and…
Vendor archive
brevo CVEs
Beta · best-effort6 CVEs tagged to vendor brevo — 1 Critical, 1 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2024-35668
Published Jun 4, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinb…
CVE-2023-26859
Published Jul 26, 2023SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privileges via the ajaxOrderTracking.php component.
CVE-2023-2472
Published Jun 5, 2023The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the ad…
CVE-2021-24874
Published Feb 14, 2022The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in at…
CVE-2021-24923
Published Jan 24, 2022The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape the sib-statistics-date parameter before outputting it back…
Showing 1-6 of 6 CVEsPage 1 of 1