CVE-2026-87781

Name of the Vulnerable Software and Affected Versions LTL Freight Quotes versions 4.2.11 through 4.2.18

Description Unauthenticated users can perform a SQL injection because the plugin fails to sanitize and escape a parameter used in a SQL statement. The issue occurs via the edit id parameter within the Shipping Rule functionality.

Recommendations Update LTL Freight Quotes to version 4.2.19 or later. Avoid using the edit id parameter in the Shipping Rule functionality until the update is applied.