CVE-2024-13726

The Themes Coder Ecommerce WordPress plugin (versions 1.3.4 and earlier ) contains an unauthenticated SQL injection vulnerability. The flaw exists because the plugin fails to properly sanitize and escape a parameter used in a SQL statement via an AJAX action . This allows unauthenticated attacker...