Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Brevo Component: Newsletter, Smtp, Email Marketing And Subscribe Clear all filters
TI-2023-02321 CVE-2023-2472 · GHSA-27xp-g53c-xc82

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS

Priority MEDIUM 60

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputting it back in the admin dashboard when the WPML plugin is als…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-06-05 Fixed in 3.1.61
TI-2021-07156 CVE-2021-24874 · GHSA-2hcr-94vw-mxjh

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting

Priority LOW 29

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to Reflected Cross-Site…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-02-14 Fixed in 3.1.31 CWE-79
TI-2021-07203 CVE-2021-24923 · GHSA-pfq2-x69w-983r

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS

Priority LOW 29

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.25 does not escape the sib-statistics-date parameter before outputting it back in an attribute, leading to a Reflected C…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0081 Published 2022-01-24 Fixed in 3.1.25 CWE-79