Lucene search
K

242 matches found

RedhatCVE
RedhatCVE
added 2025/05/21 6:17 p.m.8 views

CVE-2025-22287

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through = 2.3.1...

7.2AI score0.00221EPSS
Exploits0References1
NVD
NVD
added 2025/05/19 6:15 p.m.7 views

CVE-2025-22287

Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through = 2.3.1...

5.4CVSS0.00221EPSS
Exploits0References1
CVE
CVE
added 2025/05/19 5:56 p.m.32 views

CVE-2025-22287

CVE-2025-22287 is a Missing Authorization / Broken Access Control vulnerability in the WordPress plugin LTL Freight Quotes – FreightQuote Edition (versions

5.4CVSS7.2AI score0.00221EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.6 views

PT-2025-22053 · Enituretechnology · Enituretechnology Ltl Freight Quotes – Freightquote Edition

Name of the Vulnerable Software and Affected Versions: Eniture Technology LTL Freight Quotes – FreightQuote Edition versions 2.3.11 and earlier Description: The issue affects the Eniture Technology LTL Freight Quotes – FreightQuote Edition due to a Missing Authorization vulnerability, allowing...

5.4CVSS9.4AI score0.00221EPSS
Exploits0References3
NVD
NVD
added 2025/02/22 5:15 a.m.6 views

CVE-2024-13474

The LTL Freight Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 2.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin...

7.5CVSS0.00433EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/22 4:21 a.m.15 views

CVE-2024-13474 LTL Freight Quotes – Purolator Edition <= 2.2.3 - Unauthenticated SQL Injection

The LTL Freight Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 2.2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin...

7.5CVSS0.00433EPSS
Exploits0References2
CVE
CVE
added 2025/02/22 4:21 a.m.48 views

CVE-2024-13474

CVE-2024-13474 affects the WordPress plugin “LTL Freight Quotes – Purolator Edition” and is an SQL Injection via dropship_edit_id and edit_id. All versions up to and including 2.2.3 are affected due to insufficient escaping and lack of prepared statements, allowing unauthenticated attackers to ap...

7.5CVSS7.7AI score0.00433EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/22 12:0 a.m.4 views

PT-2025-7355 · WordPress · Ltl Freight Quotes – Purolator Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Purolator Edition plugin for WordPress versions up to, and including, 2.2.3 Description: The issue is related to SQL Injection via the dropship edit id and edit id parameters due to insufficient escaping on the user...

7.5CVSS9.7AI score0.00433EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/02/22 12:0 a.m.2 views

WordPress plugin LTL Freight Quotes – Purolator Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.5CVSS9.2AI score0.00433EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/02/21 9:54 p.m.4 views

WordPress LTL Freight Quotes – Purolator Edition plugin <= 2.2.3 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – Purolator Edition versions = 2.2.3...

7.5CVSS8.1AI score0.00433EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/21 11:25 a.m.7 views

CVE-2024-13478

The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...

7.5CVSS7.5AI score0.01125EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/02/21 11:25 a.m.7 views

CVE-2024-13483

The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

7.5CVSS7.4AI score0.00736EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/02/21 9:25 a.m.16 views

CVE-2024-13489

The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 4.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

7.5CVSS7.4AI score0.0073EPSS
Exploits3References1
GithubExploit
GithubExploit
added 2025/02/20 3:51 p.m.102 views

Exploit for SQL Injection in Eniture Ltl_Freight_Quotes

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 5.6 AND err...

7.5CVSS7.4AI score0.00736EPSS
Exploits1
GithubExploit
GithubExploit
added 2025/02/20 3:48 p.m.109 views

Exploit for SQL Injection in Eniture Ltl_Freight_Quotes

CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 5.6 AND err...

7.5CVSS7.4AI score0.00736EPSS
Exploits3
OSV
OSV
added 2025/02/20 10:15 a.m.3 views

CVE-2025-1483

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtzwdsavedropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to...

5.3CVSS7.3AI score0.00283EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/20 9:21 a.m.15 views

CVE-2025-1483 LTL Freight Quotes – GlobalTranz Edition <= 2.3.12 - Missing Authorization to Unauthenticated Settings Update

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtzwdsavedropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to...

5.3CVSS5.2AI score0.00283EPSS
Exploits0References2
CVE
CVE
added 2025/02/20 9:21 a.m.85 views

CVE-2025-1483

CVE-2025-1483 concerns the WordPress plugin “LTL Freight Quotes – GlobalTranz Edition” (

5.3CVSS5.2AI score0.00283EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2025/02/20 9:21 a.m.24 views

CVE-2025-1483 LTL Freight Quotes – GlobalTranz Edition <= 2.3.12 - Missing Authorization to Unauthenticated Settings Update

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtzwdsavedropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to...

5.3CVSS0.00283EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2025/02/20 12:0 a.m.289 views

LTL Freight Quotes – TForce Edition 3.6.4 SQL Injection

LTL Freight Quotes – TForce Edition versions 3.6.4 and below suffer from an unauthenticated remote SQL injection vulnerability. CVE-2024-13478 LTL Freight Quotes – TForce Edition = 3.6.4 - Unauthenticated SQL Injection Description The LTL Freight Quotes – TForce Edition plugin for WordPress is...

7.5CVSS8.2AI score0.01125EPSS
Exploits3
Rows per page
Query Builder