Unauthorized Log File Deletion Vulnerability Affects SendGrid for WordPress Plugin

CVE-2024-9364

What is CVE-2024-9364?

The SendGrid for WordPress plugin has a vulnerability stemming from a missing capability check on the 'wp_mailplus_clear_logs' function. This oversight enables authenticated users, with Subscriber-level access and above, to delete log files associated with the plugin. The lack of appropriate access controls allows for potential unauthorized data loss, posing a significant risk to users relying on the integrity and availability of their plugin logs.

References