Read the docs

Eniture

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Eniture records in CISA KEV

No Eniture vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

19 records

Priority MEDIUM 49

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2025-02-12 No fix listed CWE-89
Priority MEDIUM 48

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00379 Published 2025-02-16 No fix listed CWE-862
Priority MEDIUM 41

The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escapin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01035 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escapi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01008 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parame…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2025-02-12 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escap…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on t…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00797 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on th…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00797 Published 2025-02-19 No fix listed CWE-89
Priority LOW 39

The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 5.2.18 due to insufficien…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00472 Published 2025-02-19 No fix listed CWE-89
Priority LOW 39

The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parame…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2025-02-19 No fix listed CWE-89
Priority LOW 39

The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escapin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-12 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-02-12 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insuffici…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-02-12 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-20 No fix listed CWE-89
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00328 Published 2025-03-03 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-02-16 No fix listed CWE-79
Open these records in search →