CVE-2024-13726

The Themes Coder Ecommerce WordPress plugin (versions through 1.3.4 ) is vulnerable to an unauthenticated SQL injection vulnerability. The issue arises because a parameter is not properly sanitized or escaped before being used in a SQL statement via an AJAX action accessible to unauthenticated us...