Access Control Vulnerability in Eniture Technology's Small Package Quotes Plugin

CVE-2025-26960

Summary

The Small Package Quotes – Unishippers Edition by Eniture Technology is affected by a missing authorization vulnerability, allowing malicious actors to exploit improperly configured access control security levels. This flaw can lead to unauthorized access to sensitive features and information, highlighting the importance of implementing proper security controls to safeguard user data and maintain system integrity. All users of the affected version (up to 2.4.9) should promptly assess their security measures to mitigate potential risks.

References