← WordPress Vulnerabilities
WordPress security by component

SendGrid for WordPress

SendGrid for WordPress is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jan 16, 2025; the highest CVE/CNA score is 8.2.

Plugin slug: wp-sendgrid-mailer

CVE-2025-23423: SendGrid for WordPress: A security weakness

SendGrid for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 16, 2025
Safe version guidanceSee mitigation notes
Safe version
Jan 16, 2025 CVE-2025-23423
SendGrid for WordPress: A security weakness
SendGrid for WordPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Oct 18, 2024 CVE-2024-9364
SendGrid for: A security weakness
SendGrid for is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Aug 29, 2024 CVE-2024-43965
SendGrid for WordPress: SQL injection
SendGrid for WordPress is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.2
NVD9.8