Unrated severityNVD Advisory· Published Jul 30, 2021· Updated Sep 16, 2024
SendGrid <= 1.11.8 – Authorization Bypass
CVE-2021-34629
Description
The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8.
Affected products
2- SendGrid/SendGridv5Range: 1.11.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.wordfence.com/vulnerability-advisories/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.