CVE-2024-13473

The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-13473

CVE-2024-13473 affects the WordPress plugin LTL Freight Quotes – Worldwide Express Edition . An SQL injection exists via the parameters dropship_edit_id and edit_id in all versions up to and including 5.0.20 due to insufficient escaping and lack of parameterization in the SQL query. This can allo...