Small Package Quotes vulnerabilities
5 known vulnerabilities in Small Package Quotes from Eniture. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Small Package Quotes – Worldwide Express Edition: Improper Neutralization of Special Elements used in an SQL Command
The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 5.2.18 due to insufficient escaping on the user supplied paramete
- 7.5 High severity
Small Package Quotes – USPS Edition: Improper Neutralization of Special Elements used in an SQL Command
The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o
- 7.5 High severity
Small Package Quotes – For Customers of FedEx: Improper Neutralization of Special Elements used in an SQL Command
The Small Package Quotes – For Customers of FedEx plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.3.1 due to insufficient escaping on the user supplied parameter an
- 7.5 High severity
Small Package Quotes – Purolator Edition: Improper Neutralization of Special Elements used in an SQL Command
The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lac
- 7.5 High severity
Small Package Quotes – UPS Edition: Improper Neutralization of Special Elements used in an SQL Command
The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o