Vulnerabilities

TI-2024-08688 CVE-2024-9364 · GHSA-627p-px2w-v33p

SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion

LOW 20

The SendGrid for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'wp_mailplus_clear_logs' function in all versions up to, and including, 1.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00363 Published 2024-10-18 No fix listed CWE-862

TI-2024-29554 CVE-2024-43965 · GHSA-jmpg-vwvq-wqrc

WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability

MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02035 Published 2024-08-29 No fix listed CWE-89

Vulnerabilities

Filters

SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion

WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability