CVE-2024-43965: WordPress SendGrid for WordPress plugin <= 1.4 - SQL Injection vulnerability
Published Aug 29, 2024
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smackcoders SendGrid for WordPress allows SQL Injection.This issue affects SendGrid for WordPress: from n/a through 1.4.
Affected Software
1 affected component
Smackcoders Sendgrid Wordpress<=1.4
Event History
Aug 29, 2024
CVE Published
via MITRE·03:23 PM
Data Sourced
via MITRE·03:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-43965?
CVE-2024-43965 is classified as a critical SQL Injection vulnerability.
2
How do I fix CVE-2024-43965?
To fix CVE-2024-43965, update the SendGrid for WordPress plugin to the latest version beyond 1.4.
3
Which versions of SendGrid for WordPress are affected by CVE-2024-43965?
CVE-2024-43965 affects all versions of SendGrid for WordPress up to and including version 1.4.
4
What type of vulnerability is CVE-2024-43965?
CVE-2024-43965 is an SQL Injection vulnerability due to improper neutralization of special elements.
5
What systems are affected by CVE-2024-43965?
CVE-2024-43965 impacts any WordPress site using the vulnerable SendGrid for WordPress plugin.