5.3
Moyenne
CVE-2024-6010 The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and…
Description
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'create_cc_order' function, called from the Cost Calculator Builder plugin. This makes it possible for unauthenticated attackers to manipulate the price of orders submitted via the calculator. Note: this vulnerability was partially patched with the release of Cost Calculator Builder version 3.2.17.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cost Calculator Builder PRO 3.2 | premières → 3.2.1 | Pas de correctif indiqué |
| cost_calculator_builder_pro 3.2 | premières → 3.2.1 | Pas de correctif indiqué |
Autres CVE de Cost Calculator Builder PRO
Les 6 CVE de Cost Calculator Builder PRO →
CVE-2026-14900
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and…
9.8
Critique
CVE-2024-11939
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘data’…
7.5
Élevée
CVE-2024-4787
The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up…
5.8
Moyenne
CVE-2024-4789
Cost Calculator Builder Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to…
6.4
Moyenne