Vulnerabilities > Brevo > Newsletter Smtp Email Marketing AND Subscribe > 3.1.72

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-10	CVE-2024-8477	Cross-Site Request Forgery (CSRF) vulnerability in Brevo Newsletter, Smtp, Email Marketing and Subscribe The Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.87. network low complexity brevo CWE-352	4.3
2024-06-04	CVE-2024-35668	Unspecified vulnerability in Brevo Newsletter, Smtp, Email Marketing and Subscribe Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brevo Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue allows Reflected XSS.This issue affects Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue: from n/a through 3.1.77. network low complexity brevo	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.