VYPR
Medium severity4.3NVD Advisory· Published Jul 30, 2021· Updated Jun 17, 2026

CVE-2021-34629

CVE-2021-34629

Description

The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8.

Affected products

3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.