Moveto - Movers quotation and booking management tool

Moveto - Movers quotation and booking management tool has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; none of them are fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 0 high. 2024 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 1 of the records (25%). Other recurring categories include Path Traversal, SQL Injection.

None of the 4 issues recorded for Moveto - Movers quotation and booking management tool have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

All of these findings were reported by Dave Jong.

01234567891012.02.2024Today12.02.20249.8MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload CVSS 9.8 · 12.02.20249.8MoveTo <= 6.2 - Missing Authorization to Unauthenticated Options Update CVSS 9.8 · 12.02.20249.8MoveTo <= 6.2 - Unauthenticated SQL Injection CVSS 9.8 · 12.02.20249.8MoveTo <= 6.2 - Unauthenticated Directory Traversal to Arbitrary File Deletion CVSS 9.8 · 12.02.2024

Strategic Overview

Avg CVSSCritical
9.8/ 10
Patch Coverage0%
Open

4

Fixed

0

Get automatic notifications for all Moveto - Movers quotation and booking management tool vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2024-25913

MoveTo <= 6.2 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C