Skip to content
Sign in
Not rated

CVE-2021-24820 The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and…

Description

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

Affected products and versions

Product Affected versions Fixed in
Cost Calculator 1.6 No fix stated

Other CVEs of Cost Calculator

The 3 CVEs of Cost Calculator →
CVE-2023-0165 The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before… Not rated CVE-2021-24821 The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored… Not rated
Track this CVE