Log out
Get PRO

Latest

Input validation vulnerability in Small Package Quotes – For Customers of FedEx 4.3.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: February 18, 2025

The Small Package Quotes plugin for WordPress, which is used by FedEx customers, has a security vulnerability. This vulnerability allows attackers to add their own SQL queries to the existing ones, potentially giving them access to sensitive information from the database. This affects all versions up to 4.3.1. To fix this issue, the plugin needs to have better protection against user-supplied parameters and the existing SQL query needs to be better prepared.

Detected in:

Small Package Quotes – For Customers of FedEx fixed vulnerable versions: >= * <= 4.3.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.