Brevo for WooCommerce, CVE-2025-66128

CVE, Research URL: CVE-2025-66128
Home page URL: Security reports for Brevo for WooCommerce
Application: Brevo for WooCommerce
Published on: Dec 16, 2025
Research Description: Missing Authorization vulnerability in Brevo Sendinblue for WooCommerce woocommerce-sendinblue-newsletter-subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sendinblue for WooCommerce: from n/a through <= 4.0.49.
Affected versions: max 4.0.49.
Status: vulnerable