Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Eniture Component: Small Package Quotes Clear all filters
TI-2025-19789 CVE-2025-26918 · GHSA-h35h-f387-6vv4

Cross-site scripting in enituretechnology Small Package Quotes – Unishippers Edition

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes-unishippers-edition allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00328 Published 2025-03-03 No fix listed CWE-79
TI-2024-12575 CVE-2024-13534 · GHSA-xr45-72jm-wpcw

Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Unauthenticated SQL Injection

Priority LOW 39

The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 5.2.18 due to insufficien…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00472 Published 2025-02-19 No fix listed CWE-89
TI-2024-12574 CVE-2024-13533 · GHSA-369h-vqqj-7fpr

Small Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection

Priority LOW 39

The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parame…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0052 Published 2025-02-19 No fix listed CWE-89
TI-2024-12573 CVE-2024-13532 · GHSA-575x-g3c6-7cx3

Small Package Quotes – Purolator Edition <= 3.6.4 - Unauthenticated SQL Injection

Priority LOW 39

The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escapin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00452 Published 2025-02-12 No fix listed CWE-89
TI-2024-12516 CVE-2024-13475 · GHSA-8jw7-gf8r-86wh

Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection

Priority MEDIUM 41

The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parame…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00476 Published 2025-02-12 No fix listed CWE-89