CVE-2024-13480

Summary

CVE-2024-13480 is a critical SQL Injection vulnerability affecting the LTL Freight Quotes plugin for WordPress, used by FedEx Freight customers. The flaw, present in all versions up to 3.4.1, arises from insufficient escaping of user-supplied data and inadequate preparation of SQL queries. Consequently, unauthenticated attackers can inject additional queries into existing ones, potentially gaining access to sensitive database information. This vulnerability poses a significant risk and requires immediate patching to prevent potential data breaches.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.