Skip to content
OpenAdvisories

Product · Eniture technology

Small Package Quotes – UPS Edition

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection

    The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation …