CVE-2024-13479 is an SQL Injection vulnerability in the enituretechnology LTL Freight Quotes – SEFL Edition WordPress plugin, affecting all versions up to 3.2.4. The issue arises from improper neutralization of special elements in the 'dropship_edit_id' and 'edit_id' parameters, allowing unauthenticated attackers to append malicious SQL queries. This is due to insufficient escaping of user input and lack of prepared statements in the affected SQL queries. The vulnerability can be exploited remotely without authentication, potentially exposing sensitive database information.

Successful exploitation allows unauthenticated attackers to execute arbitrary SQL queries on the backend database, potentially leading to unauthorized disclosure of sensitive information. The vulnerability does not affect data integrity or availability directly but compromises confidentiality. The CVSS score of 7.5 reflects a high impact on confidentiality with no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin parameters if possible. Monitoring for updates from enituretechnology is recommended to apply any forthcoming patches promptly.