LTL Freight Quotes – Day & Ross Edition

LTL Freight Quotes – Day & Ross Edition has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Deserialization Of Untrusted Data.

Every one of the 2 issues recorded for LTL Freight Quotes – Day & Ross Edition has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. LTL Freight Quotes – Day & Ross Edition is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all LTL Freight Quotes – Day & Ross Edition vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2025-5303

LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter

Read the full analysis

Vulnerability Records

2 records


2025-09-03 00:00	LTL Freight Quotes – Day & Ross Edition <= 2.1.11 - Authenticated (Administrator+) PHP Object Injection LTL Freight Quotes <= 2.1.11	`CVE-2025-58642`	6.6 Medium	Drew Webber (mcdruid)	Yes
2025-06-06 20:22	LTL Freight Quotes – Freightview Edition <= 1.0.11, LTL Freight Quotes – Daylight Edition <=2.2.6 and LTL Freight Quotes – Day & Ross Edition <= 2.1.10 - Unauthenticated Stored Cross-Site Scripting via `expiry_date` Parameter LTL Freight Quotes <= 2.1.10	`CVE-2025-5303`	7.2 High	sterva	Yes

Showing 1–2 of 2 reports

Latestv2.2.11

LTL Freight Quotes – Day & Ross Edition

Author

enituretechnology

0.0(0)

0/100

Last Updated

2026-08-24 (20d ago)

Active Installs

10+

Downloads

3,142

Requires WP

6.4+

Requires PHP

Tested up to

WP 7.1

Created

2021-10-13 (5y ago)

Requires Plugins

woocommerce

Day & Ross is a privately owned company headquartered in Elmont, NY. Its core business is less-than-truckload (LTL)freight, but it provides a variety of other freight and logistics services. If you don’t have an Day & Ross account, contact them at 1-866-329-7677. Key Features Displays negotiated LTL shipping rates in the shopping cart. Provide quotes for shipments within the United States. Custom label results displayed in the shopping cart. Display transit times with returned quotes. Product specific freight classes. Support for variable products. Define multiple warehouses. Identify which products drop ship from vendors. Product specific shipping parameters: weight, dimensions, freight class. Option to determine a product’s class by using the built in density calculator. Option to include residential delivery fees. Option to include fees for lift gate service at the destination address. Option to mark up quoted rates by a set dollar amount or percentage. Works seamlessly with other quoting apps published by Eniture Technology. Requirements WooCommerce 6.4 or newer. Day & Ross customer number. Your username and password to dylt.com. A API key from Eniture Technology.

View on WordPress.org