CVE-2026-87781 — LTL Freight Quotes – Old Dominion Edition 4.2.11 - 4.2.18 - Unauthenticated SQLi via Shipping Rule 'edit_id' Parameter

CVE-2026-87781

LTL Freight Quotes – Old Dominion Edition 4.2.11 - 4.2.18 - Unauthenticated SQLi via Shipping Rule 'edit_id' Parameter PUBLISHED

Description (CNA)

The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

Affected (CNA)

Vendor / product	Versions
Unknown / LTL Freight Quotes	affected 4.2.11 before 4.2.19

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e600ef26-5aec-4e4a-96be-d67875c337a0/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.