CVE-2021-34629

MEDIUM · CVSS 4.3 EPSS 0.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-07-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-34629

Severity

MEDIUM

CVSS

4.3

EPSS

0.70%

WordPress

Original NVD Description

The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8.