CVE-2024-13488

The CVE-2024-13488 entry describes an unauthenticated SQL Injection in the WordPress plugin LTL Freight Quotes – Estes Edition up to version 3.3.7, caused by insufficient escaping of the dropship_edit_id/edit_id parameters and lack of proper query preparation. This enables attackers to append add...