LTL Freight Quotes – Purolator Edition
LTL Freight Quotes – Purolator Edition has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for LTL Freight Quotes – Purolator Edition has a vendor fix available, so running the current release closes it.
All of these findings were reported by Colin Xu. The current release is tested up to WordPress 7.1.
CVE-2024-13474LTL Freight Quotes – Purolator Edition <= 2.2.3 - Unauthenticated SQL Injection
Read the full analysisVulnerability Records

LTL Freight Quotes – Purolator Edition
Author
enituretechnology
Purolator is headquartered in Mississauga, Ontario and is Canada’s premier shipping company. If you don’t have a Purolator account number, contact them at 888-744-7123, or register online[https://eshiponline.purolator.com/ShipOnline/SecurePages/Public/Register.aspx]. Key Features Displays negotiated LTL shipping rates in the shopping cart. Provides quotes for shipments within Canada and to the United States. Define a custom label to identify the LTL freight rate in the cart. Elect to display carrier transit times with rate estimates. Define multiple warehouses. Identify products that drop ship from vendors. Product specific shipment parameters: weight, dimensions, freight class. Option to set a product’s freight class automatically through the built in density calculator. Support for variable products. Shipment parameters can be set differently for each product variation. Option to always include the residential delivery charge. Option to include lift gate delivery charge. Option to mark up shipping rates by a set dollar amount or by a percentage. Works seamlessly with other quoting apps published by Eniture Technology. Requirements WooCommerce 6.4 or newer. A Purolator account number. A Purolator production key. A Purolator production password A API key from Eniture Technology.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C