Approved changes feed: RSS · Atom

cpe:2.3:a:enituretechnology:small_package_quotes_–_usps_edition:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnituretechnology (86c8c1a1-4b5e-5497-9fe2-59a40ac10589)
ProductSmall Package Quotes – Usps Edition (3b1f4a1d-7740-5db2-a95c-24cfacac68b8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58218 vulnerable 2026-06-03 15:06:20.940492 WordPress Small Package Quotes – USPS Edition Plugin <= 1.3.9 - PHP Object Injection Vulnerability
HIGH (7.2)
Deserialization of Untrusted Data vulnerability in enituretechnology Small Package Quotes – USPS Edition small-package-quotes-usps-edition allows Object Injection.This issue affects Small Package Quotes – USPS Edition: from n/a through <= 1.3.9.
Published: 2025-08-27T17:45:51.650Z
Updated: 2026-04-28T16:13:42.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13533 vulnerable 2026-06-03 14:54:24.859725 Small Package Quotes – USPS Edition <= 1.3.5 - Unauthenticated SQL Injection
HIGH (7.5)
The Small Package Quotes – USPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' parameter in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Published: 2025-02-19T11:10:41.753Z
Updated: 2026-04-08T17:28:49.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.