CVE-2024-13489

Summary

CVE-2024-13489 is a newly disclosed SQL Injection vulnerability affecting the LTL Freight Quotes – Old Dominion Edition plugin for WordPress. The weakness lies in the plugin's handling of the 'edit_id' and 'dropship_edit_id' parameters, which fail to adequately escape user-supplied input and improperly prepare existing SQL queries. This issue allows unauthenticated attackers to inject malicious SQL code into queries, potentially extracting sensitive information from the database. Versions up to and including 4.2.10 of the plugin are reportedly vulnerable.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.