Veille CVE

Octobre 2026

4 CVE

Critique 0 Élevée 2 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown LTL Freight Quotes » ✕
  1. CVE-2026-107160 5.3 Moyenne

    Unknown LTL Freight Quotes

    The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.

  2. CVE-2026-107158 5.3 Moyenne

    Unknown LTL Freight Quotes

    The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to modify some of the LTL Freight Quotes WordPress plugin before 4.2.19's stored settings.

  3. CVE-2026-87781 8.6 Élevée

    Unknown LTL Freight Quotes

    The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

  4. CVE-2026-87780 8.8 Élevée

    Unknown LTL Freight Quotes

    The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an administrative page, leading to Stored XSS which will execute in the session of any administrator viewing it.