https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1483.htmlhttps://patchthecve.com/cve/CVE-2025-1483.htmlWed, 17 Jun 2026 08:39:14 +0000MEDIUM 5.3: The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtz_wd_save_dropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to updhttps://patchthecve.com/cve/CVE-2024-13476.htmlhttps://patchthecve.com/cve/CVE-2024-13476.htmlWed, 17 Jun 2026 07:02:05 +0000HIGH 7.5: The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to SQL Injection via the 'engtz_wd_save_dropship' AJAX endpoint in all versions up to, and including, 2.3.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing https://patchthecve.com/cve/CVE-2025-22289.htmlhttps://patchthecve.com/cve/CVE-2025-22289.htmlWed, 17 Jun 2026 08:46:11 +0000MEDIUM 6.5: Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through <= 2.5.8.https://patchthecve.com/cve/CVE-2025-22284.htmlhttps://patchthecve.com/cve/CVE-2025-22284.htmlWed, 17 Jun 2026 08:46:09 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Reflected XSS.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through <https://patchthecve.com/cve/CVE-2024-13488.htmlhttps://patchthecve.com/cve/CVE-2024-13488.htmlWed, 17 Jun 2026 07:02:06 +0000HIGH 7.5: The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQhttps://patchthecve.com/cve/CVE-2024-13480.htmlhttps://patchthecve.com/cve/CVE-2024-13480.htmlWed, 17 Jun 2026 07:02:05 +0000HIGH 7.5: The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation ohttps://patchthecve.com/cve/CVE-2024-13477.htmlhttps://patchthecve.com/cve/CVE-2024-13477.htmlWed, 17 Jun 2026 07:02:05 +0000HIGH 7.5: The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makhttps://patchthecve.com/cve/CVE-2024-13490.htmlhttps://patchthecve.com/cve/CVE-2024-13490.htmlWed, 17 Jun 2026 07:02:07 +0000HIGH 7.5: The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL https://patchthecve.com/cve/CVE-2024-13473.htmlhttps://patchthecve.com/cve/CVE-2024-13473.htmlWed, 17 Jun 2026 07:02:05 +0000HIGH 7.5: The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the