CVE-2024-13483

Summary

CVE-2024-13483 is a critical vulnerability affecting the LTL Freight Quotes – SAIA Edition plugin for WordPress. This issue allows unauthenticated attackers to conduct SQL Injections by leveraging the insufficient escaping on user-supplied 'edit_id' and 'dropship_edit_id' parameters. The impact of this vulnerability is significant as it enables attackers to append additional SQL queries to existing ones, potentially extracting sensitive information from the database. The vulnerability persists in all versions up to and including 2.2.10, making it essential for WordPress users to update their plugins to the latest version as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.