LTL Freight Quotes – Worldwide Express Edition

LTL Freight Quotes – Worldwide Express Edition has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2025 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (40%). Other recurring categories include SQL Injection, Cross-Site Scripting.

Every one of the 5 issues recorded for LTL Freight Quotes – Worldwide Express Edition has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Colin Xu. LTL Freight Quotes – Worldwide Express Edition is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all LTL Freight Quotes – Worldwide Express Edition vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2024-13473

LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

5 records


2026-04-07 00:00	LTL Freight Quotes – Worldwide Express Edition <= 5.2.1 - Missing Authorization LTL Freight Quotes <= 5.2.1	`CVE-2026-34899`	5.3 Medium	Legion Hunter	Yes
2025-02-12 00:00	LTL Freight Quotes – Worldwide Express Edition <= 5.0.21 - Reflected Cross-Site Scripting LTL Freight Quotes <= 5.0.21	`CVE-2025-22286`	6.1 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2025-02-12 00:00	LTL Freight Quotes – Worldwide Express Edition <= 5.0.20 - Missing Authorization to Unauthenticated Arbitrary Content Deletion LTL Freight Quotes <= 5.0.20	`CVE-2025-22291`	5.3 Medium	Kévin Mosbahi (Mika)	Yes
2025-02-11 20:34	LTL Freight Quotes - Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection LTL Freight Quotes <= 5.0.20	`CVE-2024-13473`	7.5 High	Colin Xu	Yes
2025-01-18 00:00	LTL Freight Quotes – Worldwide Express Edition <= 5.0.20 - Unauthenticated SQL Injection LTL Freight Quotes <= 5.0.20	`CVE-2025-24664`	7.5 High	Colin Xu	Yes

Showing 1–5 of 5 reports

Latestv5.2.16

LTL Freight Quotes – Worldwide Express Edition

Author

enituretechnology

5.0(2)

100/100

Last Updated

2026-09-10 (3d ago)

Active Installs

100+

Downloads

19,868

Requires WP

6.4+

Requires PHP

7.4+

Tested up to

WP 6.9.7

Created

2016-05-05 (11y ago)

Requires Plugins

woocommerce

Worldwide Express (wwex.com ) is a third party logistics company that gives its customers access to UPS and over 60 LTL freight carriers through a single account relationship. The plugin retrieves the LTL freight rates you negotiated Worldwide Express, takes action on them according to the plugin settings, and displays the result as shipping charges in your WooCommerce shopping cart. To establish a Worldwide Express account call 1-800-758-7447. Key Features Three rating options: Cheapest, Cheapest Options and Average. Custom label results displayed in the shopping cart. Control the number of options displayed in the shopping cart. Display transit times with returned quotes. Restrict the carrier list to omit specific carriers. Product specific freight classes. Support for variable products. Option to determine a product’s class by using the built in density calculator. Option to include residential delivery fees. Option to include fees for lift gate service at the destination address. Option to mark up quoted rates by a set dollar amount or percentage. Requirements WooCommerce 6.4 or newer. A Worldwide Express account number. Your username and password to Worldwide Express’s online shipping system. Your Worldwide Express web services authentication key. An API key from Eniture Technology.

View on WordPress.org