The vulnerability involves unsafe deserialization of untrusted data in enituretechnology's LTL Freight Quotes – Daylight Edition plugin. By injecting crafted objects during deserialization, an attacker could potentially execute arbitrary code or otherwise compromise the WordPress site. The weakness is classified as insecure deserialization, a common vector for escalating privileges or running malicious code.

This issue affects the WordPress plugin LTL Freight Quotes – Daylight Edition from its earliest release up through version 2.2.7. The product is maintained by enituretechnology.

The CVSS score of 7.2 indicates a high severity, but the EPSS score of less than 1% suggests a low probability that this flaw will be actively exploited at present. The vulnerability is not listed by CISA in the KEV catalog. The attack vector is inferred to involve a crafted serialized payload that the plugin processes without adequate validation, likely via a web request or user input field integrated into the plugin's functionality.