WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ltl-freight-quotes-globaltranz-edition
Published
2025-02-19
Title
LTL Freight Quotes – GlobalTranz Edition < 2.3.12 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-odfl-edition
Published
2025-02-18
Title
LTL Freight Quotes – Old Dominion Edition < 4.2.11 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-purolator-freight-edition
Published
2025-02-21
Title
LTL Freight Quotes – Purolator Edition < 2.2.4 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-rl-edition
Published
2025-02-18
Title
LTL Freight Quotes – R+L Carriers Edition < 3.3.5 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-rl-edition
Published
2026-04-07
Title
LTL Freight Quotes – R+L Carriers Edition < 3.3.14 - Missing Authorization to Unauthenticated Settings Update
Slug
ltl-freight-quotes-saia-edition
Published
2025-02-18
Title
LTL Freight Quotes – SAIA Edition < 2.2.11 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-sefl-edition
Published
2025-02-18
Title
LTL Freight Quotes – SEFL Edition < 3.2.5 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-tql-edition
Published
2025-09-03
Title
LTL Freight Quotes - TQL Edition < 1.2.7 - Authenticated (Administrator+) PHP Object Injection
Slug
ltl-freight-quotes-unishippers-edition
Published
2025-02-11
Title
LTL Freight Quotes – Unishippers Edition < 2.5.9 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-unishippers-edition
Published
2025-02-12
Title
LTL Freight Quotes – Unishippers Edition < 2.5.9 - Reflected Cross-Site Scripting
Slug
ltl-freight-quotes-unishippers-edition
Published
2025-02-12
Title
LTL Freight Quotes – Unishippers Edition < 2.5.9 - Missing Authorization
Slug
ltl-freight-quotes-ups-edition
Published
2025-02-18
Title
LTL Freight Quotes – TForce Edition < 3.6.5 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-01-18
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.21 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-02-11
Title
LTL Freight Quotes - Worldwide Express Edition < 5.0.21 - Unauthenticated SQL Injection
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-02-12
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.22 - Reflected Cross-Site Scripting
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2025-02-12
Title
LTL Freight Quotes – Worldwide Express Edition < 5.0.21 - Missing Authorization to Unauthenticated Arbitrary Content Deletion
Slug
ltl-freight-quotes-worldwide-express-edition
Published
2026-04-07
Title
LTL Freight Quotes – Worldwide Express Edition < 5.2.2 - Missing Authorization
Slug
ltl-freight-quotes-xpo-edition
Published
2025-02-11
Title
LTL Freight Quotes – XPO Edition < 4.3.8 - Unauthenticated SQL Injection
Slug
ltm-popup-form
Published
2026-03-06
Title
LotekMedia Popup Form <= 1.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
Slug
lu-radioplayer
Published
2024-11-12
Title
LUNA RADIO PLAYER < 6.24.11.07 - Unauthenticated Arbitrary File Read
Slug
lu-radioplayer
Published
2024-11-15
Title
LUNA RADIO PLAYER < 6.24.11.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
lucas-string-replace
Published
2024-09-12
Title
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Slug
lucidlms
Published
2025-01-07
Title
LucidLMS <= 1.0.5 - Reflected Cross-Site Scripting
Slug
lucky-draw
Published
2025-12-12
Title
Lucky Draw Contests <= 4.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
luckywp-scripts-control
Published
2023-08-28
Title
LuckyWP Scripts Control < 1.2.2 - CSRF via multiple AJAX actions