Vulnerabilidades em enituretechnology
49 resultadosAnálise Vexday
A Eniture Technology apresenta um portfólio de 49 vulnerabilidades, sendo 6 delas críticas, com predominância de falhas de injeção SQL (CWE-89) que permitem manipulação de dados e potencial acesso não autorizado. Não há registros de exploração ativa em ambiente selvagem, e a ausência de novos CVEs nos últimos 90 dias sugere que o risco é histórico e não recente. O perfil indica exposição moderada relacionada principalmente a práticas inseguras de construção de código, exigindo revisão de componentes legados e controles de entrada de dados.
CVE-2024-13531HIGHShipEngine Shipping Quotes <= 1.0.7 - Unauthenticated SQL InjectionEPSS 0.4%CVE-2024-52495HIGHWordPress Distance Based Shipping Calculator plugin <= 2.0.23 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-24667CRITICALWordPress Small Package Quotes Plugin <= 5.2.17 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-26960MEDIUMWordPress Small Package Quotes – Unishippers Edition plugin <= 2.4.9 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-58218HIGHWordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2025-24665CRITICALWordPress Small Package Quotes Plugin <= 2.4.8 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-24664CRITICALWordPress LTL Freight Quotes Plugin <= 5.0.20 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-3646MEDIUMLTL Freight Quotes – R+L Carriers Edition <= 3.3.13 - Missing Authorization to Unauthenticated Settings UpdateEPSS 0.4%CVE-2025-58643HIGHWordPress LTL Freight Quotes – Daylight Edition Plugin <= 2.2.7 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2025-58642HIGHWordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2025-58644HIGHWordPress LTL Freight Quotes - TQL Edition Plugin <= 1.2.6 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2025-22289MEDIUMWordPress LTL Freight Quotes – Unishippers Edition plugin <= 2.5.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-31078HIGHWordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.18 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-30915MEDIUMWordPress Small Package Quotes – Worldwide Express Edition plugin <= 5.2.19 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-30916MEDIUMWordPress Residential Address Detection plugin <= 2.5.4 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-22290CRITICALWordPress LTL Freight Quotes – FreightQuote Edition Plugin <= 2.3.11 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-5303HIGHLTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` ParameterEPSS 0.4%CVE-2025-26764MEDIUMWordPress Distance Based Shipping Calculator plugin <= 2.0.22 - Settings Change vulnerabilityEPSS 0.3%CVE-2025-26918HIGHWordPress Small Package Quotes – Unishippers Edition plugin <= 2.4.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-22285MEDIUMWordPress Pallet Packaging for WooCommerce Plugin <= 1.1.15 - Broken Access Control vulnerabilityEPSS 0.3%