LTL Freight Quotes – Estes Edition
LTL Freight Quotes – Estes Edition has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for LTL Freight Quotes – Estes Edition has a vendor fix available, so running the current release closes it.
All of these findings were reported by Colin Xu. LTL Freight Quotes – Estes Edition is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-13488LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

LTL Freight Quotes – Estes Edition
Author
enituretechnology
woocommerceEstes is a privately owned company headquartered in Richmond, Virginia. Its core business is less-than-truckload (LTL)freight, but it provides a variety of other freight and logistics services. If you don’t have an Estes account, contact them at 804-353-1900. Key Features Displays negotiated LTL shipping rates in the shopping cart. Provide quotes for shipments within the United States and to Canada. Custom label results displayed in the shopping cart. Display transit times with returned quotes. Product specific freight classes. Support for variable products. Define multiple warehouses. Identify which products drop ship from vendors. Product specific shipping parameters: weight, dimensions, freight class. Option to determine a product’s class by using the built in density calculator. Option to include residential delivery fees. Option to include fees for lift gate service at the destination address. Option to mark up quoted rates by a set dollar amount or percentage. Works seamlessly with other quoting apps published by Eniture Technology. Requirements WooCommerce 6.4 or newer. An Estes Express account number. A My Estes login and password. A API key from Eniture Technology.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C