6 matches found
CVE-2024-43965
CVE-2024-43965 SendGrid for WordPress = 1.4 - Injection SQL non authentifiée Description Le plugin SendGrid for WordPress pour WordPress est vulnérable à une injection SQL dans les versions jusqu'à la 1.4 incluse, en raison d'un échappement insuffisant du paramètre fourni par l'utilisateur et d'u...
EUVD-2021-21279
Malware in sbrugna...
PT-2025-4870 · Sendgrid · Sendgrid For Wordpress
Name of the Vulnerable Software and Affected Versions: SendGrid for WordPress versions 1.4 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This can lead to unauthorized access du...
CVE-2024-43965
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4...
CVE-2021-34629
The SendGrid WordPress plugin is vulnerable to authorization bypass via the getajaxstatistics function found in the /lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8...
PT-2021-20596 · Sendgrid · Wordpress Sender Plugin
Name of the Vulnerable Software and Affected Versions: SendGrid WordPress plugin versions up to and including 1.11.8 Description: The issue allows authenticated users to bypass authorization and export statistics for a WordPress multi-site main site. This is possible due to a vulnerability in the...