CVE-2025-22289
Published: 16 February 2025
Description
Missing Authorization vulnerability in enituretechnology LTL Freight Quotes – Unishippers Edition ltl-freight-quotes-unishippers-edition allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LTL Freight Quotes – Unishippers Edition: from n/a through <= 2.5.8.
Security Summary
CVE-2025-22289 is a missing authorization vulnerability (CWE-862) in the WordPress plugin LTL Freight Quotes – Unishippers Edition by enituretechnology. It enables exploitation of incorrectly configured access control security levels and affects all versions of the plugin from n/a through 2.5.8. The issue was published on 2025-02-16.
Unauthenticated attackers can exploit this vulnerability remotely over the network (AV:N) with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). Exploitation leads to low impacts on integrity (I:L) and availability (A:L) with no confidentiality impact (C:N) and unchanged scope (S:U), yielding a CVSS v3.1 base score of 6.5.
Mitigation details are available in the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/ltl-freight-quotes-unishippers-edition/vulnerability/wordpress-ltl-freight-quotes-unishippers-edition-plugin-2-5-8-broken-access-control-vulnerability?_s_id=cve.
Details
- CWE(s)