Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: LTL Freight Quotes 4.2.19 Clear all filters
TI-2026-70162 CVE-2026-87781 · GHSA-wjc2-8p3x-27rg

SQL injection in LTL Freight Quotes WordPress plugin

Priority MEDIUM 43

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00262 Published 2026-10-10 Fixed in 4.2.19 CWE-89
TI-2026-70161 CVE-2026-87780 · GHSA-8vww-hgq3-gp87

Stored XSS in LTL Freight Quotes Old Dominion Edition plugin

Priority MEDIUM 40

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to S…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00239 Published 2026-10-10 Fixed in 4.2.19 CWE-79