CVE-2026-34899
- EPSS 0.03%
- Veröffentlicht 07.04.2026 08:31:37
- Zuletzt bearbeitet 07.04.2026 13:20:11
Missing Authorization vulnerability in Eniture technology LTL Freight Quotes – Worldwide Express Edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Worldwide Express Edition: from n...
CVE-2025-22287
- EPSS 0.12%
- Veröffentlicht 19.05.2025 17:56:54
- Zuletzt bearbeitet 15.04.2026 00:35:42
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes –...
CVE-2025-22286
- EPSS 0.09%
- Veröffentlicht 16.02.2025 23:15:09
- Zuletzt bearbeitet 15.04.2026 00:35:42
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows Reflected XSS.This issue affect...
CVE-2025-22290
- EPSS 0.08%
- Veröffentlicht 16.02.2025 23:15:09
- Zuletzt bearbeitet 15.04.2026 00:35:42
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Frei...
CVE-2025-22291
- EPSS 0.05%
- Veröffentlicht 16.02.2025 23:15:09
- Zuletzt bearbeitet 15.04.2026 00:35:42
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freigh...
CVE-2024-13488
- EPSS 15.08%
- Veröffentlicht 15.02.2025 12:15:30
- Zuletzt bearbeitet 28.02.2025 19:47:07
The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and...
CVE-2025-24664
- EPSS 0.07%
- Veröffentlicht 27.01.2025 14:15:29
- Zuletzt bearbeitet 15.04.2026 00:35:42
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – Worldwide Express Edition ltl-freight-quotes-worldwide-express-edition allows SQL Injection.This issue affect...