4.3
Moyenne
CVE-2024-6012 The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
Description
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'embed-create-page' and 'embed-insert-pages' functions in all versions up to, and including, 3.2.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary posts and append arbitrary content to existing posts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cost Calculator Builder 3.2 | premières → 3.2.12 | Pas de correctif indiqué |
Autres CVE de Cost Calculator Builder
Les 13 CVE de Cost Calculator Builder →
CVE-2026-7753
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing…
6.5
Moyenne
CVE-2026-10865
The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
5.3
Moyenne
CVE-2025-14755
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct…
5.3
Moyenne
CVE-2025-14757
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all…
5.3
Moyenne