What’s Vulnerable › Products
enituretechnology Small Package Quotes – Worldwide Express Edition vulnerabilities
13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Latest enituretechnology Small Package Quotes – Worldwide Express Edition vulnerabilities
- CVE-2025-58218 — WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability (CVSS 7.2)
- CVE-2025-30915 — WordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.19 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2025-31078 — WordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.18 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2025-27268 — WordPress Small Package Quotes – Worldwide Express Edition Plugin <= 5.2.18 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2025-26918 — WordPress Small Package Quotes – Unishippers Edition plugin <= 2.4.9 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2025-26960 — WordPress Small Package Quotes – Unishippers Edition plugin <= 2.4.9 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2024-13534 — Small Package Quotes – Worldwide Express Edition <= 5.2.18 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2024-13533 — Small Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2024-13491 — Small Package Quotes – For Customers of FedEx <= 4.3.1 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2024-13532 — Small Package Quotes – Purolator Edition <= 3.6.4 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2024-13475 — Small Package Quotes – UPS Edition <= 4.5.16 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2025-24667 — WordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2025-24665 — WordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerability (CVSS 9.3)