Read the docs

Eniture

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

Eniture records in CISA KEV

No Eniture vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

13 records in Ltl Freight Quotes · all components

Priority MEDIUM 49

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2025-02-12 No fix listed CWE-89
Priority MEDIUM 48

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00379 Published 2025-02-16 No fix listed CWE-862
Priority MEDIUM 41

The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escapin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01035 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escapi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01008 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escap…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on t…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00797 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on th…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00797 Published 2025-02-19 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-02-12 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insuffici…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-02-12 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-20 No fix listed CWE-89
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-02-16 No fix listed CWE-79
Open these records in search →