CVE-2024-13488

Summary

CVE-2024-13488: This vulnerability affects the LTL Freight Quotes – Estes Edition plugin for WordPress. Unauthenticated attackers can exploit SQL Injection vulnerabilities by manipulating the 'dropship_edit_id' and 'edit_id' parameters. Insufficient escaping of user-supplied input and lack of preparation of SQL queries allow attackers to append additional queries, potentially extracting sensitive information from the database. All versions up to and including 3.3.7 are vulnerable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.