neeraj_slit
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Brevo – Email, SMS, Web Push, Chat, and more. | 3 | – | Jul 10, 2026 |
| Brevo for WooCommerce | 1 | – | Jan 8, 2026 |
Exploited and recent CVEs
- CVE-2026-15297 Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting 0.4%
- CVE-2025-14799 Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling 0.5%
- CVE-2025-14436 Brevo for WooCommerce <= 4.0.49 - Unauthenticated Stored Cross-Site Scripting 0.3%
- CVE-2024-8477 Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery 0.2%