smackcoders

Records49All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

smackcoders records in CISA KEV

No smackcoders vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Import All Pages, Post Types, Products, Orders, And Users As Xml & Csv 7 records HIGH Wp Ultimate Csv Importer 4 records MEDIUM Export All Posts, Products, Orders, Refunds & Users 3 records LOW Echo Sign 2 records LOW Sendgrid 2 records MEDIUM Ultimate Exporter 2 records MEDIUM Wp Ultimate Email Marketer Plugin 2 records LOW Lead Form Data Collection To Crm 1 record LOW

Records

2 records in Sendgrid · all components

TI-2024-29554 CVE-2024-43965 · GHSA-jmpg-vwvq-wqrc

WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability

MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02035 Published 2024-08-29 No fix listed CWE-89

TI-2024-08688 CVE-2024-9364 · GHSA-627p-px2w-v33p

SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion

LOW 20

The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp_mailplus_clear_logs' function in all versions up to, and including, 1.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00363 Published 2024-10-18 No fix listed CWE-862

Open these records in search →

Critical	4
High	25
Medium	20
Low	0
No CVSS	0