Skip to content
OpenAdvisories
High · 7.2 CVE-2025-58218 EUVD-2025-25917GHSA-r469-7rxf-6jmg

WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability

Published Aug 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through <= 1.3.9.

Affected products

VendorProductAffectedFixed
enituretechnology Small Package Quotes – USPS Edition ≤ 1.3.9 —

References