This vulnerability (CVE-2024-43965) in Smackcoders SendGrid for WordPress is an SQL Injection issue (CWE-89) that affects versions through 1.4. It allows an attacker to inject malicious SQL commands due to improper sanitization of special elements used in SQL queries. The CVSS 3.1 score is 8.2, indicating high severity, with an attack vector over the network, no privileges required, user interaction needed, and a scope change. The vulnerability impacts confidentiality with high impact and availability with low impact. No official fix or patch has been published yet, and no known exploits have been observed.

Successful exploitation could allow an attacker to execute unauthorized SQL commands on the affected database, potentially leading to disclosure of sensitive information (high confidentiality impact) and limited disruption of service (low availability impact). Integrity impact is reported as none. The vulnerability requires user interaction but no privileges, and can be exploited remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider limiting exposure of the vulnerable plugin, disabling or removing it if not necessary, and monitoring for updates from Smackcoders. No official remediation or temporary fix has been published by the vendor at this time.