Priority MEDIUM 49
The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00576 · Published 2025-02-12 · No fix listed CWE-89
Priority MEDIUM 48
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00379 · Published 2025-02-16 · No fix listed CWE-862
Priority MEDIUM 41
The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escapin…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01035 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 41
The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escapi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01008 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 41
The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01218 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 41
The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parame…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00476 · Published 2025-02-12 · No fix listed CWE-89
Priority MEDIUM 40
The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escap…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00791 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 40
The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00797 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 40
The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on th…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00797 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 5.2.18 due to insufficien…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00472 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parame…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0052 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escapin…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – For Customers of FedEx plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.1 due to insufficient es…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00472 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insuffici…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-02-20 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in all versions up to, and including, 5.0.20 due to insufficient e…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00498 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows Reflected…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00328 · Published 2025-03-03 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS…
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.0026 · Published 2025-02-16 · No fix listed CWE-79