CVE-2026-15297 | Brevo Newsletter, SMTP, Email marketing and Subscribe Forms Plugin Page Parameter cross site scripting

July 10, 2026 Yanac

A vulnerability has been found in Brevo Newsletter, SMTP, Email marketing and Subscribe Forms Plugin up to 3.1.77 on WordPress and classified as problematic. This affects an unknown part of the component Page Parameter Handler. This manipulation of the argument page causes cross site scripting.

This vulnerability is handled as CVE-2026-15297. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More