Priority MEDIUM 49
Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Privilege Escalation.This issue affects Residential Address Detection: from n/a through <= 2.5.4…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00451 · Published 2025-03-03 · No fix listed CWE-862
Priority MEDIUM 49
The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied p…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00576 · Published 2025-02-12 · No fix listed CWE-89
Priority MEDIUM 48
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00379 · Published 2025-02-16 · No fix listed CWE-862
Priority MEDIUM 47
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injecti…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00503 · Published 2025-03-03 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injecti…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00425 · Published 2025-01-27 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows SQL Injec…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00402 · Published 2025-01-27 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows S…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00402 · Published 2025-01-27 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injecti…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00361 · Published 2025-02-16 · No fix listed CWE-89
Priority MEDIUM 41
The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01146 · Published 2025-02-15 · No fix listed CWE-89
Priority MEDIUM 41
The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escapin…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01035 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 41
The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escapi…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01008 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 41
The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01218 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 41
The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parame…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00476 · Published 2025-02-12 · No fix listed CWE-89
Priority MEDIUM 40
The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escap…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00791 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 40
The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on t…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00797 · Published 2025-02-19 · No fix listed CWE-89
Priority MEDIUM 40
The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on th…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00797 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
Missing Authorization vulnerability in enituretechnology Standard Box Sizes – for WooCommerce standard-box-sizes.This issue affects Standard Box Sizes – for WooCommerce: from n/a through <= 1.6.13.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00316 · Published 2025-01-21 · No fix listed CWE-862
Priority LOW 39
The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 5.2.18 due to insufficien…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00472 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parame…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0052 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escapin…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and l…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The Small Package Quotes – For Customers of FedEx plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.1 due to insufficient es…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00472 · Published 2025-02-19 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insuffici…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-12 · No fix listed CWE-89
Priority LOW 39
The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-02-20 · No fix listed CWE-89
Load more