high8.6
CVE-2026-87781
The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection e…
Impact
The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.
Affected products
| Product | Affected versions |
|---|---|
| LTL Freight Quotes WordPress Plugin | before 4.2.19 |
Versions were read from the advisory text. No structured product data has been published for this record yet.