CVE-2025-14799

A security flaw exists in the Brevo plugin for WordPress, affecting versions up to 3.3.0. The issue arises from a comparison function used to verify an installation ID on the `/wp-json/mailin/v1/mailin_disconnect` endpoint, which utilizes loose equality checks instead of strict ones. As a result, attackers can exploit this weakness by submitting a `true` value for the `id` parameter, thereby evading authorization and gaining access to sensitive plugin settings and features.

Based on public CVE data (MITRE/NVD).