Skip to content
Noroxi

Cost Calculator Builder

cost-calculator-builder · plugin

Known security vulnerabilities for Cost Calculator Builder. Find out in seconds which version runs on your site with WP Lens.

16 known vulnerabilities

2 critical · 1 with public exploit code · latest Aug 5, 2026

Vulnerabilities

  • CVE-2024-43144

    WordPress Cost Calculator Builder plugin <= 3.2.15 - SQL Injection vulnerability

    Critical 9.8

  • CVE-2025-39587

    WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection Vulnerability

    Critical 9.3

  • CVE-2025-12529

    Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion

    High 8.8

  • CVE-2025-9243

    Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions

    High 8.1

  • CVE-2026-7753

    Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure

    Medium 6.5

  • CVE-2025-62049

    WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability

    Medium 6.5

  • CVE-2025-2128

    Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter

    Medium 6.5

  • CVE-2025-31414

    WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-48277

    WordPress Cost Calculator Builder plugin <= 3.2.74 - Cross Site Scripting (XSS) Vulnerability

    Medium 5.9

  • CVE-2023-40011

    WordPress Cost Calculator Builder plugin <= 3.1.42 - Broken Access Control vulnerability

    Medium 5.4

  • CVE-2026-10865

    Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys

    Medium 5.3

  • CVE-2025-14755

    Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference

    Medium 5.3

  • CVE-2025-14757

    Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass

    Medium 5.3

  • CVE-2024-6010

    Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price Manipulation

    Medium 5.3

  • CVE-2024-6011

    Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2024-6012

    Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation

    Medium 4.3

← Back to directory