CVE-2024-13534

creationtimestamp| type| source ---|---|--- 2025-02-19 12:15:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijqw725sm2o 2025-02-19 14:16:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lijxnkjp3j2z 2025-02-19 16:14:04+00:00| seen|...

CVE-2024-13534

CVE-2024-13534 affects the WordPress plugin “Small Package Quotes – Worldwide Express Edition.” The issue is an unauthenticated SQL Injection via the edit_id and dropship_edit_id parameters in all versions up to and including 5.2.18, stemming from insufficient escaping and inadequate preparation ...