1 result · Clear filters · Feed
-
High 7.5
ShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL Injection
The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ex…