CVE-2024-13322

CVE-2024-13322 describes an unauthenticated SQL injection in the WordPress Ads Pro Plugin (Multi-Purpose Advertising Manager) up to version 4.88. The root cause is insufficient escaping of the a_id parameter and lack of proper preparation in the existing SQL query, allowing attackers to append ad...