Skip to content
OpenAdvisories

Product · Eniture technology

ShipEngine Shipping Quotes

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    ShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL Injection

    The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the ex…