CVE-2025-27268

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/...

CVE-2025-27268

creationtimestamp| type| source ---|---|--- 2025-03-03 15:49:00+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114099286010046432 2025-03-03 18:03:41+00:00| seen| https://t.me/cvedetector/19362 2025-03-04 00:00:12+00:00| seen|...

CVE-2025-27268

CVE-2025-27268 affects the WordPress plugin Small Package Quotes – Worldwide Express Edition (versions up to 5.2.18). The issue is an SQL Injection caused by improper neutralization of special elements in SQL commands. The CVSS 3.1 vector reports Network attack on non-authenticated user with a Ch...