Medium severity5.3NVD Advisory· Published Feb 20, 2025· Updated Jun 17, 2026

CVE-2025-1483

Description

The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtz_wd_save_dropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to update the drop shipping settings.

Affected products

enituretechnology/LTL Freight Quotes – GlobalTranz Editionv5
Range: 0
WordPress/LTL Freight Quotes – GlobalTranz Editionllm-create
Range: <=2.3.12
Wwexgroup/Ltl Freight Quotes
cpe:2.3:a:wwexgroup:ltl_freight_quotes:*:*:*:*:globaltranz:wordpress:*:*
Range: <2.3.13
WordPress/GlobalTranz Editionwp-canonicalize

Patches

Vulnerability mechanics

References

plugins.trac.wordpress.org/changeset/3243002/nvdPatch
www.wordfence.com/threat-intel/vulnerabilities/id/0906e9b0-5093-4ddd-8868-8fcaad8e3a5bnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000