Brevo vulnerabilities
We track 3 vulnerabilities in Brevo products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2024.
Latest Brevo vulnerabilities
- 8.8 High severity
Newsletter, SMTP, Email marketing and…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.82.
- 8.5 High severity
Sendinblue for WooCommerce: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brevo Sendinblue for WooCommerce allows Relative Path Traversal, Manipulating Web Input to File System Calls.This issue affects Sendinblue for WooCommerce: from n/a
- 9.8 Critical severity
Brevo: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privileges via the ajaxOrderTracking.php component.