CVE-2025-14436 | Brevo for WooCommerce Plugin up to 4.0.49 on WordPress user_connection_id cross site scripting

January 8, 2026 Yanac

A vulnerability described as problematic has been identified in Brevo for WooCommerce Plugin up to 4.0.49 on WordPress. This affects an unknown part. Such manipulation of the argument user_connection_id leads to cross site scripting.

This vulnerability is referenced as CVE-2025-14436. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More