Log in Start free

Brevo

Products

ProductCVEsExploitedLatest
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue2–Aug 26, 2024
Sendinblue for WooCommerce2–Dec 16, 2025

Exploited and recent CVEs

  • CVE-2025-66128 Medium 5.3 WordPress Sendinblue for WooCommerce plugin <= 4.0.49 - Broken Access Control vulnerability 0.3%
  • CVE-2024-43287 Medium 4.3 WordPress Brevo plugin <= 3.1.82 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-35668 High 7.1 WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-32807 High 8.5 WordPress Brevo for WooCommerce plugin <= 4.0.17 - Arbitrary File Download and Deletion vulnerability 0.6%