Read the docs

Brevo

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Brevo records in CISA KEV

No Brevo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Newsletter, Smtp, Email Marketing And Subscribe 5 records MEDIUM Brevo 1 record MEDIUM

Records

5 records in Newsletter, Smtp, Email Marketing And Subscribe · all components

TI-2023-02321 CVE-2023-2472 · GHSA-27xp-g53c-xc82

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS

Priority MEDIUM 60

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is als…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-06-05 Fixed in 3.1.61
TI-2021-07203 CVE-2021-24923 · GHSA-pfq2-x69w-983r

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS

Priority LOW 29

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape the sib-statistics-date parameter before outputting it back in an attribute, leading to a Reflected C…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0081 Published 2022-01-24 Fixed in 3.1.25 CWE-79
TI-2021-07156 CVE-2021-24874 · GHSA-2hcr-94vw-mxjh

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting

Priority LOW 29

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-02-14 Fixed in 3.1.31 CWE-79
Open these records in search →