TI-2024-12572 CVE-2024-13531 · GHSA-29jh-29g9-62wgShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL InjectionPriority LOW 39The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and l…CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-12 · No fix listed CWE-89