Unknown Ltl Freight Quotes vulnerabilities

4 CVEs affecting Unknown Ltl Freight Quotes, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-107160, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-107158, published 2026-10-14. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauthenticated users to…
CVE-2026-87781, published 2026-10-10. High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days. The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
CVE-2026-87780, published 2026-10-10. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them back in an…
CVE-2026-107160, published 2026-10-14. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to…