13 matches found
CVE-2025-22289
CVE-2025-22289 affects WordPress plugin LTL Freight Quotes – Unishippers Edition (
CVE-2024-13473
CVE-2024-13473 affects the WordPress plugin LTL Freight Quotes – Worldwide Express Edition . An SQL injection exists via the parameters dropship_edit_id and edit_id in all versions up to and including 5.0.20 due to insufficient escaping and lack of parameterization in the SQL query. This can allo...
CVE-2024-13476
CVE-2024-13476 concerns the LTL Freight Quotes – GlobalTranz Edition WordPress plugin. The issue is an SQL Injection via the engtz_wd_save_dropship AJAX endpoint present in all versions up to 2.3.11, caused by insufficient escaping of a user-supplied parameter and inadequate preparation of the SQ...
CVE-2024-13489
The CVE-2024-13489 entry concerns the WordPress plugin LTL Freight Quotes – Old Dominion Edition. Affected: all versions up to 4.2.10. Vulnerability: SQL Injection via parameters edit_id and dropship_edit_id due to insufficient escaping and lack of prepared statements in the existing SQL query. I...
CVE-2025-22284
CVE-2025-22284: Reflected XSS in WordPress plugin LTL Freight Quotes – Unishippers Edition (enituretechnology) up to version 2.5.8. Root cause: improper input neutralization during web page generation. Affects the plugin on WordPress sites; impact includes potential leakage or manipulation of use...
CVE-2024-13480
CVE-2024-13480 affects the WordPress plugin “LTL Freight Quotes – For Customers of FedEx Freight”. The vulnerability is an unauthenticated SQL Injection in versions up to 3.4.1, caused by insufficient escaping of user-supplied inputs and inadequate query preparation for the edit_id and dropship_e...
CVE-2024-13477
The CVE-2024-13477 entry describes an SQL Injection in WordPress plugin LTL Freight Quotes – Unishippers Edition (affected versions up to 2.5.8) via the edit_id parameter due to insufficient escaping and unprepared SQL queries. Connected sources (Wordfence, Patchstack, CVE listings) confirm unaut...
CVE-2024-13478
The CVE covers the WordPress plugin LTL Freight Quotes – TForce Edition. Affected component: the WordPress plugin (ltl-freight-quotes-ups-edition). Root cause: insufficient escaping on the user-supplied parameters dropship_edit_id and edit_id and inadequate preparation of the underlying SQL query...
CVE-2024-13490
CVE-2024-13490 affects the LTL Freight Quotes – XPO Edition WordPress plugin. The vulnerability is an unauthenticated SQL Injection caused by insufficient escaping and poor query prep in the edit_id and dropship_edit_id parameters, exploitable in all versions up to 4.3.7. Remediation: upgrade to ...
CVE-2024-13483
CVE-2024-13483 affects the WordPress plugin LTL Freight Quotes – SAIA Edition up to version 2.2.10 . The issue is an unauthenticated SQL Injection via the parameters edit_id and dropship_edit_id due to insufficient escaping and inadequate SQL query preparation, enabling attackers to append querie...
CVE-2024-13479
The CVE-2024-13479 entry for LTL Freight Quotes – SEFL Edition (WordPress plugin) is supported by connected data indicating an unauthenticated SQL Injection via dropship_edit_id and edit_id in all versions up to 3.2.4 due to insufficient escaping on the input and inadequate prep in the SQL query....
CVE-2024-13485
CVE-2024-13485 affects the WordPress plugin “LTL Freight Quotes – ABF Freight Edition” up to version 3.3.7. The vulnerability is an unauthenticated SQL injection via the parameters “edit_id” and “dropship_edit_id” caused by insufficient escaping and unsafe query construction, enabling attackers t...
CVE-2024-13481
CVE-2024-13481 – LTL Freight Quotes – R+L Carriers Edition (WordPress) Affected software: LTL Freight Quotes – R+L Carriers Edition plugin for WordPress, all versions up to and including 3.3.4. Root cause: SQL Injection via the edit_id and dropship_edit_id parameters caused by insufficient escapi...