Eniture Small Package Quotes — known CVE vulnerabilities

Every CVE whose affected-product data names Eniture Small Package Quotes, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-13475 — CVSS 7.5 (high): The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up…
• CVE-2024-13491 — CVSS 7.5 (high): The Small Package Quotes – For Customers of FedEx plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and…
• CVE-2024-13532 — CVSS 7.5 (high): The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id'…
• CVE-2024-13533 — CVSS 7.5 (high): The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions…
• CVE-2024-13534 — CVSS 7.5 (high): The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and…
• CVE-2025-26918 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package…