CVE-2024-13480: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

WordPress plugin LTL Freight Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2024-13531: Improper Neutralization of Special Elements used in an SQL Command

The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

WordPress plugin LTL Freight Quotes – For Customers of FedEx Freight SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress plugin LTL Freight Quotes - For...

PT-2025-6463

Name of the Vulnerable Software and Affected Versions LTL Freight Quotes – Worldwide Express Edition plugin for WordPress versions up to and including 5.0.20 Description The issue is related to SQL injection through the dropship edit id and edit id parameters due to insufficient escaping of...

WordPress plugin Small Package Quotes – UPS Edition SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin LTL Freight Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin LTL Freight Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

WordPress plugin Small Package Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

PT-2025-6464 · WordPress · The Small Package Quotes – Ups Edition

Name of the Vulnerable Software and Affected Versions: The Small Package Quotes – UPS Edition plugin for WordPress versions up to, and including, 4.5.16 Description: The issue allows for SQL Injection via the edit id parameter due to insufficient escaping on the user-supplied parameter and lack o...

CVE-2024-13477: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

PT-2025-6467

Name of the Vulnerable Software and Affected Versions ShipEngine Shipping Quotes plugin for WordPress versions up to, and including, 1.0.7 Description The issue allows for SQL Injection via the edit id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...

WordPress plugin ShipEngine Shipping Quotes SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2024-13475: Improper Neutralization of Special Elements used in an SQL Command

The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

CVE-2024-13532: Improper Neutralization of Special Elements used in an SQL Command

The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

PT-2025-6550 · WordPress · Ltl Freight Quotes – Unishippers Edition

Name of the Vulnerable Software and Affected Versions: LTL Freight Quotes – Unishippers Edition plugin for WordPress versions up to, and including, 2.5.8 Description: The issue is related to SQL Injection via the edit id parameter due to insufficient escaping on the user-supplied parameter and la...

WordPress LTL Freight Quotes – For Customers of FedEx Freight plugin <= 3.4.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin LTL Freight Quotes – For Customers of FedEx Freight versions = 3.4.1...

WordPress Small Package Quotes – Purolator Edition plugin <= 3.6.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – Purolator Edition versions = 3.6.4...

WordPress Small Package Quotes – UPS Edition plugin <= 4.5.16 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin Small Package Quotes – UPS Edition versions = 4.5.16...

WordPress ShipEngine Shipping Quotes plugin <= 1.0.7 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Colin Xu in WordPress Plugin ShipEngine Shipping Quotes versions = 1.0.7...