LTL Freight Quotes – R+L Carriers Edition Missing Authorization Vulnerability in WordPress Plugin

A missing authorization vulnerability has been identified in the LTL Freight Quotes – R+L Carriers Edition plugin for WordPress, affecting all versions through 3.3.13. The vulnerability arises from inadequate authentication, authorization, and nonce verification in a standalone PHP file that processes GET parameters and updates WordPress options. This flaw allows unauthenticated attackers to alter the plugin's subscription plan settings, downgrading stores from paid plans to the Trial Plan, changing store types, and manipulating subscription expiration dates. Such changes could disrupt premium features like Dropship and Hazardous Material handling.

Impact

Exploitation of this vulnerability allows unauthenticated users to modify subscription settings, potentially downgrading paid plans, altering store types, and disrupting premium features.

Reproduction

The vulnerability can be reproduced by sending a GET request to the webhook handler without authentication. The request can include parameters to change the subscription plan, store type, and expiration dates.

Remediation

Users are advised to update the LTL Freight Quotes – R+L Carriers Edition plugin to version 3.3.14 or later.