EUVD-2021-21279

Malware in sbrugna...

CVE-2021-34629

The SendGrid WordPress plugin is vulnerable to authorization bypass via the getajaxstatistics function found in the /lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8...

Authorization

The SendGrid WordPress plugin is vulnerable to authorization bypass via the getajaxstatistics function found in the /lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8...

CVE-2021-34629

CVE-2021-34629 affects the WordPress SendGrid plugin (versions up to and including 1.11.8). The vulnerability is an authorization bypass in the function get_ajax_statistics (located at ~/lib/class-sendgrid-statistics.php) that can be exploited by an authenticated user to export statistics for the...