9.3
Critical
CVE-2025-27268 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition small-package-quotes-wwe-edition allows SQL Injection.This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through <= 5.2.18.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Small Package Quotes – Worldwide Express Edition 5.2 | earliest → 5.2.18 | No fix stated |
Other CVEs of Small Package Quotes – Worldwide Express Edition
The 5 CVEs of Small Package Quotes – Worldwide Express Edition →
CVE-2025-30915
Missing Authorization vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition…
6.5
Medium
CVE-2025-31078
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in…
7.1
High
CVE-2024-13534
The Small Package Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the…
7.5
High
CVE-2025-24667
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in…
9.3
Critical