Lucene search
K

7 matches found

OSV
OSV
added 2025/02/20 10:15 a.m.2 views

CVE-2025-1483

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtzwdsavedropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to...

5.3CVSS7.3AI score0.00283EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/20 9:21 a.m.15 views

CVE-2024-13476 LTL Freight Quotes – GlobalTranz Edition <= 2.3.11 - Unauthenticated SQL Injection

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtzwdsavedropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...

7.5CVSS0.00418EPSS
Exploits0References2
CVE
CVE
added 2025/02/20 9:21 a.m.81 views

CVE-2025-1483

CVE-2025-1483 concerns the WordPress plugin “LTL Freight Quotes – GlobalTranz Edition” (

5.3CVSS5.2AI score0.00283EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/02/20 12:0 a.m.2 views

WordPress plugin LTL Freight Quotes – GlobalTranz Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.5CVSS9.4AI score0.00418EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/20 12:0 a.m.3 views

PT-2025-7514 · WordPress · Ltl Freight Quotes – Globaltranz Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – GlobalTranz Edition plugin for WordPress versions up to, and including, 2.3.12 Description: The issue concerns a missing capability check on the "engtz wd save dropship" AJAX endpoint, allowing unauthenticated attackers t...

5.3CVSS9.6AI score0.00283EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/02/19 11:37 p.m.3 views

WordPress LTL Freight Quotes – GlobalTranz Edition plugin <= 2.3.12 - Missing Authorization to Unauthenticated Settings Update vulnerability

Missing Authorization to Unauthenticated Settings Update vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – GlobalTranz Edition versions = 2.3.12...

5.3CVSS7AI score0.00283EPSS
Exploits0References1Affected Software1
Patchstack
Patchstack
added 2025/02/19 11:37 p.m.2 views

WordPress LTL Freight Quotes – GlobalTranz Edition plugin <= 2.3.11 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – GlobalTranz Edition versions = 2.3.11...

7.5CVSS8.1AI score0.00418EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder