{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ltl-freight-quotes--old-dominion-edition--4.2.10/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:eniture:ltl_freight_quotes:*:*:*:*:old_dominion:wordpress:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2024-13489"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LTL Freight Quotes – Old Dominion Edition (\u003c= 4.2.10)"],"_cs_severities":["high"],"_cs_tags":["web-application","wordpress","sqli"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eThe LTL Freight Quotes - Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection in versions 4.2.10 and below. This is caused by insufficient escaping on user-supplied parameters and a lack of sufficient preparation on the existing SQL query. Unauthenticated attackers can append additional SQL queries to extract sensitive information. Public exploit proof-of-concept code is available.\u003c/p\u003e\n","date_modified":"2026-10-29T01:48:01Z","date_published":"2026-10-29T01:48:01Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2024-13489-sqli/","summary":"The Eniture LTL Freight Quotes - Old Dominion Edition WordPress plugin (versions 4.2.10 and below) is vulnerable to unauthenticated SQL injection via the 'edit_id' and 'dropship_edit_id' parameters. Public exploit code is available on Sploitus.","title":"Eniture LTL Freight Quotes: Unauthenticated SQL Injection (CVE-2024-13489)","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2024-13489-sqli/"}],"language":"en","title":"CraftedSignal Threat Feed - LTL Freight Quotes – Old Dominion Edition (\u003c= 4.2.10)","version":"https://jsonfeed.org/version/1.1"}