Vulnerabilities > CVE-2021-34629 - Unspecified vulnerability in Sendgrid 1.11.8
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |