This vulnerability (CVE-2024-43965) involves improper neutralization of special elements used in SQL commands (CWE-89) within the Smackcoders SendGrid for WordPress plugin, versions up to 1.4. It allows an attacker to perform SQL Injection attacks, which could lead to unauthorized data access or limited denial of service. The CVSS 3.1 base score is 8.2, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, high confidentiality impact, no integrity impact, and low availability impact. No patch or official remediation has been disclosed by the vendor as of the publication date.

Successful exploitation could allow an unauthenticated attacker to inject SQL commands via user interaction, potentially leading to unauthorized disclosure of sensitive information (high confidentiality impact) and limited denial of service (low availability impact). Integrity impact is not indicated. The scope of impact extends beyond the vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or removing the affected plugin or restricting access to it to trusted users only. Monitor official Smackcoders communications for updates on patches or mitigations.