CVE-2026-87781: Unknown Ltl Freight Quotes

High severity, CVSS 8.6. EPSS: 0.2% chance of exploitation in the next 30 days.

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

Affected products

• Unknown Ltl Freight Quotes: from 4.2.11, before 4.2.19 (fixed in 4.2.19)

Published 2026-10-10. Last modified 2026-10-10.