CVE-2024-9364

Name of the Vulnerable Software and Affected Versions SendGrid for WordPress plugin versions up to, and including, 1.4

Description The issue is related to a missing capability check on the wp mailplus clear logs function, which allows authenticated attackers with Subscriber-level access and above to delete the plugin's log files, resulting in unauthorized loss of data.

Recommendations For SendGrid for WordPress plugin versions up to, and including, 1.4, consider disabling the wp mailplus clear logs function until a patch is available to prevent unauthorized deletion of log files.