Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

Priority LOW 39

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-20 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on t…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00797 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escapi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01008 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escapin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01035 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on th…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00797 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 41

The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01218 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 40

The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escap…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2025-02-19 No fix listed CWE-89
Priority MEDIUM 48

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00379 Published 2025-02-16 No fix listed CWE-862
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-02-16 No fix listed CWE-79
Priority LOW 39

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insuffici…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-02-12 No fix listed CWE-89
Priority MEDIUM 49

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied p…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00576 Published 2025-02-12 No fix listed CWE-89
Priority LOW 39

The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00442 Published 2025-02-12 No fix listed CWE-89