neeraj_slit Brevo – Email, SMS, Web Push, Chat, and more. vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Latest neeraj_slit Brevo – Email, SMS, Web Push, Chat, and more. vulnerabilities

CVE-2026-15297 — Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.77 - Reflected Cross-Site Scripting (CVSS 6.1)
CVE-2025-14799 — Brevo - Email, SMS, Web Push, Chat, and more. <= 3.3.0 - Unauthenticated Authorization Bypass via Type Juggling (CVSS 6.5)
CVE-2024-8477 — Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) <= 3.1.87 - Cross-Site Request Forgery (CVSS 4.3)
CVE-2024-35668 — WordPress Newsletter, SMTP, Email marketing and Subscribe forms by Brevo plugin <= 3.1.77 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
CVE-2023-2472 — Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS (CVSS 6.1)
CVE-2021-24874 — Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting (CVSS 6.1)
CVE-2021-24923 — Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS (CVSS 6.1)