neeraj_slit

Products

ProductCVEsExploitedLatest
Brevo – Email, SMS, Web Push, Chat, and more.3–Jul 10, 2026
Brevo for WooCommerce1–Jan 8, 2026

Exploited and recent CVEs

  • CVE-2026-15297 Medium 6.1 Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting 0.4%
  • CVE-2025-14799 Medium 6.5 Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling 0.5%
  • CVE-2025-14436 High 7.2 Brevo for WooCommerce <= 4.0.49 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2024-8477 Medium 4.3 Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery 0.2%