CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Smackcoders Inc., SendGrid for WordPress wp-sendgrid-mailer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SendGrid for WordPress: from n/a through <= 1.4.
Explanation of Vulnerability in Simple Terms
The SendGrid for WordPress plugin versions 1.4 and earlier lack proper authorization checks on certain functions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability does not affect confidentiality or availability, only data integrity. Update to a version newer than 1.4.
What an attacker can do
Modify data in the plugin that should be restricted to higher-privilege users.
Potential impact on your site
Unauthorized users can alter SendGrid plugin settings or data, potentially disrupting email functionality or exposing configuration.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
