Cpe:2.3:a:eniture:ltl_freight_quotes:*:*:*:*:old_dominion:wordpress:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aenitureltl_freight_quotesold_dominionwordpress/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 29 Oct 2026 01:48:01 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgEniture LTL Freight Quotes: Unauthenticated SQL Injection (CVE-2024-13489)https://feed.craftedsignal.io/briefs/2026-10-cve-2024-13489-sqli/Thu, 29 Oct 2026 01:48:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-cve-2024-13489-sqli/The Eniture LTL Freight Quotes - Old Dominion Edition WordPress plugin (versions 4.2.10 and below) is vulnerable to unauthenticated SQL injection via the 'edit_id' and 'dropship_edit_id' parameters. Public exploit code is available on Sploitus.<p>The LTL Freight Quotes - Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection in versions 4.2.10 and below. This is caused by insufficient escaping on user-supplied parameters and a lack of sufficient preparation on the existing SQL query. Unauthenticated attackers can append additional SQL queries to extract sensitive information. Public exploit proof-of-concept code is available.</p> highadvisoryweb-applicationwordpresssqli