CVE-2021-34629: Sendgrid

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The SendGrid WordPress plugin is vulnerable to authorization bypass via the get_ajax_statistics function found in the ~/lib/class-sendgrid-statistics.php file which allows authenticated users to export statistic for a WordPress multi-site main site, in versions up to and including 1.11.8.

Affected products

• Sendgrid Sendgrid: up to and including 1.11.8

Published 2021-07-30. Last modified 2026-06-17.