6 matches found
CVE-2024-43965
CVE-2024-43965 SendGrid for WordPress = 1.4 - Unauthenticated SQL Injection Description The SendGrid for WordPress plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparati...
EUVD-2021-21279
Malware in sbrugna...
PT-2025-4870 · Sendgrid · Sendgrid For Wordpress
Name of the Vulnerable Software and Affected Versions: SendGrid for WordPress versions 1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to unauthorized access du...
CVE-2024-43965
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4...
CVE-2021-34629
The SendGrid WordPress plugin is vulnerable to authorization bypass via the getajaxstatistics function found in the /lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8...
PT-2021-20596 · Sendgrid · Wordpress Sender Plugin
Name of the Vulnerable Software and Affected Versions: SendGrid WordPress plugin versions up to and including 1.11.8 Description: The issue allows authenticated users to bypass authorization and export statistics for a WordPress multi-site main site. This is possible due to a vulnerability in the...