WordPress LTL Freight Quotes Plugin <= 5.0.20 - Vulnerabilidad de Inyección SQL (SQL Injection)

Successful exploitation of this SQL Injection vulnerability could grant an attacker complete control over the database associated with the LTL Freight Quotes plugin. This includes the ability to read, modify, or delete sensitive data such as customer information, shipment details, and financial records. An attacker could potentially gain access to user credentials stored in the database, enabling them to compromise other systems or accounts. The blast radius extends to any system or application that relies on the compromised database, potentially leading to significant data breaches and operational disruptions. While no direct precedent is immediately obvious, SQL Injection vulnerabilities are frequently exploited for data exfiltration and privilege escalation.

WordPress websites utilizing the LTL Freight Quotes – Worldwide Express Edition plugin, particularly those running versions 0.0.0 through 5.0.20, are at significant risk. Shared hosting environments where multiple websites share the same database are especially vulnerable, as a compromise of one site could potentially impact others.

• wordpress / composer / npm:

grep -r "SELECT * FROM" /var/www/html/wp-content/plugins/ltl-freight-quotes-worldwide-express-edition/

• generic web:

curl -I 'https://your-wordpress-site.com/wp-content/plugins/ltl-freight-quotes-worldwide-express-edition/?param='; # Check for SQL errors in response headers

• wordpress / composer / npm:

wp plugin list | grep ltl-freight-quotes-worldwide-express-edition # Check installed version

1. 2025-01-27Disclosure

   disclosure

1. Reservado2025-01-23
2. Publicada2025-01-27
3. Modificada2026-04-28
4. EPSS actualizado2026-04-02

The primary mitigation for CVE-2025-24664 is to immediately upgrade the LTL Freight Quotes – Worldwide Express Edition plugin to version 5.0.21 or later. If upgrading is not immediately feasible due to compatibility issues or downtime concerns, consider implementing a Web Application Firewall (WAF) rule to filter potentially malicious SQL queries targeting the vulnerable endpoints. Specifically, look for patterns indicative of SQL injection attempts, such as the presence of single quotes, double quotes, semicolons, or SQL keywords in user-supplied input. Additionally, review and restrict database user permissions to limit the potential damage from a successful attack. After upgrading, confirm the fix by attempting a SQL injection attack on the vulnerable endpoint and verifying that it is properly blocked.

Instalaciones activas

80Nicho

Valoración del plugin