Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: LTL Freight Quotes 4.2.19 Clear all filters
TI-2026-73841 CVE-2026-107160 · GHSA-24m7-3873-c4ch

Stored HTML injection in LTL Freight Quotes Old Dominion Edition plugin

Priority LOW 29

The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links t…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00156 Published 2026-10-14 Fixed in 4.2.19 CWE-345
TI-2026-73840 CVE-2026-107158 · GHSA-6xpm-7w33-3g9q

Missing authorization in LTL Freight Quotes, Old Dominion Edition plugin

Priority LOW 30

The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00282 Published 2026-10-14 Fixed in 4.2.19 CWE-862