CVE-2026-107160: CWE-345 Insufficient Verification of Data Authenticity in LTL Freight Quotes
Description
The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthenticated users to inject HTML and links that are rendered to visitors on the storefront.
CVSS v3.1
Score 5.3medium
Affected software
LTL Freight Quotes
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-107160 describes an insufficient verification of data authenticity vulnerability (CWE-345) in the LTL Freight Quotes WordPress plugin versions before 4.2.19. The plugin fails to perform authorization checks or sanitize input before storing certain request values, enabling unauthenticated attackers to inject arbitrary HTML and links. These injected elements are rendered to storefront visitors, potentially leading to content manipulation or phishing risks.
Potential Impact
Unauthenticated users can inject arbitrary HTML and links into the storefront, which are then rendered to visitors. This could lead to content spoofing, phishing, or other social engineering attacks targeting site visitors. The vulnerability affects the integrity and authenticity of the displayed content on affected sites.
Mitigation Recommendations
Upgrade the LTL Freight Quotes plugin to version 4.2.19 or later, where this vulnerability is fixed. Since the vulnerability is resolved in 4.2.19, applying this official fix fully mitigates the issue. No other mitigation is indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-10-07T10:58:57.582Z
- State
- PUBLISHED
Threat ID: 6acf22562cdf04f656513b90
Added to database: 10/14/2026, 06:33:58 UTC
Last enriched: 10/14/2026, 07:05:13 UTC
Last updated: 10/14/2026, 19:00:33 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.