Veille CVE

Mercredi 14 octobre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown LTL Freight Quotes » ✕
  1. CVE-2026-107160 5.3 Moyenne

    Unknown LTL Freight Quotes

    The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.

  2. CVE-2026-107158 5.3 Moyenne

    Unknown LTL Freight Quotes

    The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.