Lucene search
+L

199 matches found

CNNVD
CNNVD
added 2025/06/07 12:00 a.m.9 views

WordPress plugin LTL Freight Quotes – Day & Ross Edition和WordPress plugin LTL Freight Quotes – Daylight Edition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

7.2CVSS6.4AI score0.00353EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2025/06/06 9:41 p.m.12 views

WordPress LTL Freight Quotes – Freightview Edition plugin <= 1.0.11 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via expirydate Parameter vulnerability discovered by sterva in WordPress Plugin LTL Freight Quotes – Freightview Edition versions = 1.0.11...

7.2CVSS5.4AI score0.00353EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/06/06 9:41 p.m.10 views

WordPress LTL Freight Quotes – Day & Ross Edition plugin <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via expirydate Parameter vulnerability discovered by sterva in WordPress Plugin LTL Freight Quotes – Day & Ross Edition versions = 2.1.10...

7.2CVSS5.4AI score0.00353EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2025/06/06 9:41 p.m.14 views

WordPress LTL Freight Quotes – Daylight Edition plugin <= 2.2.6 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via expirydate Parameter vulnerability discovered by sterva in WordPress Plugin LTL Freight Quotes – Daylight Edition versions = 2.2.6...

7.2CVSS5.4AI score0.00353EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/21 6:17 p.m.12 views

CVE-2025-22287

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through = 2.3.1...

7.2AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/19 6:15 p.m.14 views

CVE-2025-22287

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through = 2.3.1...

5.4CVSS0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 5:56 p.m.48 views

CVE-2025-22287

CVE-2025-22287 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin LTL Freight Quotes – FreightQuote Edition (versions

5.4CVSS7.2AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:00 a.m.13 views

PT-2025-22053 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Freightquote Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology LTL Freight Quotes – FreightQuote Edition versions 2.3.11 and earlier Description: The issue affects the Eniture Technology LTL Freight Quotes – FreightQuote Edition due to a Missing Authorization vulnerability, allowing...

5.4CVSS9.4AI score0.00259EPSS
SaveExploits0References3
NVD
NVD
added 2025/02/22 5:15 a.m.11 views

CVE-2024-13474

The LTL Freight Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 2.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin...

7.5CVSS0.00459EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/22 4:21 a.m.56 views

CVE-2024-13474

CVE-2024-13474 affects the WordPress plugin “LTL Freight Quotes – Purolator Edition” and is an SQL Injection via dropship_edit_id and edit_id. All versions up to and including 2.2.3 are affected due to insufficient escaping and lack of prepared statements, allowing unauthenticated attackers to ap...

7.5CVSS7.7AI score0.00459EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/22 4:21 a.m.25 views

CVE-2024-13474 LTL Freight Quotes – Purolator Edition <= 2.2.3 - Unauthenticated SQL Injection

The LTL Freight Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 2.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin...

7.5CVSS0.00459EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/22 12:00 a.m.6 views

WordPress plugin LTL Freight Quotes – Purolator Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.5CVSS9.2AI score0.00459EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/22 12:00 a.m.10 views

PT-2025-7355 · WordPress · Ltl Freight Quotes – Purolator Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Purolator Edition plugin for WordPress versions up to, and including, 2.2.3 Description: The issue is related to SQL Injection via the dropship edit id and edit id parameters due to insufficient escaping on the user...

7.5CVSS9.7AI score0.00459EPSS
SaveExploits0References9
Patchstack
Patchstack
added 2025/02/21 9:54 p.m.7 views

WordPress LTL Freight Quotes – Purolator Edition plugin <= 2.2.3 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Purolator Edition versions = 2.2.3...

7.5CVSS8.1AI score0.00459EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/21 11:25 a.m.11 views

CVE-2024-13478

The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

7.5CVSS7.5AI score0.01218EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/02/21 11:25 a.m.11 views

CVE-2024-13483

The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

7.5CVSS7.4AI score0.00797EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/02/21 9:25 a.m.22 views

CVE-2024-13489

The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 4.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.5CVSS7.4AI score0.00791EPSS
SaveExploits3References1
GithubExploit
GithubExploit
added 2025/02/20 3:51 p.m.117 views

Exploit for SQL Injection in Eniture Ltl_Freight_Quotes

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 5.6 AND err...

7.5CVSS7.4AI score0.00797EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2025/02/20 3:48 p.m.121 views

Exploit for SQL Injection in Eniture Ltl_Freight_Quotes

CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 5.6 AND err...

7.5CVSS7.4AI score0.00797EPSS
SaveExploits3
OSV
OSV
added 2025/02/20 10:15 a.m.7 views

CVE-2025-1483

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtzwdsavedropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to...

5.3CVSS7.3AI score0.003EPSS
SaveExploits0References2
Rows per page
Query Builder