Plugin icon

Brevo – Email, SMS, Web Push, Chat, and more.

mailin

Vulnerabilities:

8

Last Updated:

April 1, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-02-17
Title
Brevo < 3.3.1 - Unauthenticated Authorization Bypass via Type Juggling
Fixed in
Fixed in 3.3.1
CVSS
6.5 (medium)
Published
2024-10-09
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) < 3.1.88 - Cross-Site Request Forgery
Fixed in
Fixed in 3.1.88
CVSS
4.3 (medium)
Published
2024-08-16
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.83 - Cross-Site Request Forgery
Fixed in
Fixed in 3.1.83
CVSS
4.3 (medium)
Published
2024-06-03
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.78 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.1.78
CVSS
6.1 (medium)
Published
2024-03-22
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Brevo < 3.1.78 - Reflected XSS
Fixed in
Fixed in 3.1.78
CVSS
7.1 (high)
Published
2023-05-15
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
Fixed in
Fixed in 3.1.61
CVSS
7.1 (high)
Published
2022-01-12
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.1.31
CVSS
4.7 (medium)
Published
2021-12-23
Title
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.25 - Reflected XSS
Fixed in
Fixed in 3.1.25
CVSS
7.5 (high)