CVE-2024-13713

Summary

CVE-2024-13713 is a vulnerability affecting the WPExperts Square For GiveWP plugin for WordPress. This issue allows authenticated attackers, with Subscriber-level access and above, to inject SQL queries through the 'post' parameter due to insufficient escaping and lack of query preparation. Consequently, attackers can extract sensitive information from the database by appending malicious SQL code to existing queries. Versions up to and including 1.3.1 are vulnerable to this SQL Injection attack.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.