← Back

Enituretechnology

enituretechnology

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Shipengine Shipping Quotes
shipengine_shipping_quotes
1 CVE
Ltl Freight Quotes
ltl_freight_quotes
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-13488
1Enituretechnology
1Ltl Freight Quotes
Jun 17, 2026
Feb 15, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on t...Show more
The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.Show less
CVE-2024-13531
1Enituretechnology
1Shipengine Shipping Quotes
Jun 17, 2026
Feb 12, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and l...Show more
The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.Show less