5.8
Medium
CVE-2024-4787 The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up…
Description
The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.75. This is due to insufficient limitations on the email recipient and the content in the 'send_pdf' and the 'send_pdf_front' functions which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cost Calculator Builder PRO 3.1 | earliest → 3.1.75 | No fix stated |
| cost_calculator_builder_pro 3.1 | earliest → 3.1.75 | No fix stated |
Other CVEs of Cost Calculator Builder PRO
The 6 CVEs of Cost Calculator Builder PRO →
CVE-2026-14900
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and…
9.8
Critical
CVE-2024-11939
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘data’…
7.5
High
CVE-2024-6010
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and…
5.3
Medium
CVE-2024-4789
Cost Calculator Builder Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to…
6.4
Medium