SendGrid for WordPress

SendGrid for WordPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 10.0 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include SQL Injection.

None of the 3 issues recorded for SendGrid for WordPress have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, most of them (2) reported by Ananda Dhakal.

01234567891026.08.2024Today26.08.202410.0SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection CVSS 10.0 · 26.08.202417.10.20244.3SendGrid for WordPress <= 1.4 - Missing Authorization to Authenticated (Subscriber+) Log Deletion CVSS 4.3 · 17.10.202416.01.20254.3SendGrid for WordPress <= 1.4 - Missing Authorization CVSS 4.3 · 16.01.2025

Strategic Overview

Avg CVSSMedium
6.2/ 10
Patch Coverage0%
Open

3

Fixed

0

Get automatic notifications for all SendGrid for WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 10.0CVE-2024-43965

SendGrid for WordPress <= 1.4 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C