WordPress security by component
Cost Calculator Builder
Plugin description
Cost Calculator Builder is a WordPress component with 18 published CVE records in this archive. The latest tracked vulnerability was published Jul 11, 2026; the highest CVE/CNA score is 9.3.
Plugin slug:
cost-calculator-builderLatest vulnerability
CVE-2026-10865: Cost Calculator Builder: Sensitive information exposure
Cost Calculator Builder is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 4.0.11.
| Safe version |
|
||
|---|---|---|---|
| Jul 11, 2026 |
CVE-2026-10865
Cost Calculator Builder: Sensitive information exposure
Cost Calculator Builder is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller. The published affected range is <= 4.0.11.
|
> 4.0.11 |
CVE5.3
NVDPending
|
| May 13, 2026 |
CVE-2025-14755
Cost Calculator Builder: A security weakness
Cost Calculator Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.0.1.
|
> 4.0.1 |
CVE5.3
NVDPending
|
| Jan 16, 2026 |
CVE-2025-14757
Cost Calculator Builder: A security weakness
Cost Calculator Builder is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Dec 02, 2025 |
CVE-2025-12529
Cost Calculator Builder: Code execution
Cost Calculator Builder is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Nov 06, 2025 |
CVE-2025-62049
Cost Calculator Builder: A security weakness
Cost Calculator Builder is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Oct 04, 2025 |
CVE-2025-9243
Cost Calculator Builder: A security weakness
Cost Calculator Builder is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE8.1
NVDPending
|
| May 19, 2025 |
CVE-2025-48277
Cost Calculator Builder: Cross-site scripting
Cost Calculator Builder is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.9
NVDPending
|
| Apr 17, 2025 |
CVE-2025-39587
Cost Calculator Builder: SQL injection
Cost Calculator Builder is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE9.3
NVDPending
|
| Apr 11, 2025 |
CVE-2025-2128
Cost Calculator Builder: SQL injection
Cost Calculator Builder is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Mar 31, 2025 |
CVE-2025-31414
Cost Calculator Builder: Cross-site scripting
Cost Calculator Builder is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Dec 18, 2024 |
CVE-2024-10892
Cost Calculator Builder: Cross-site request forgery
Cost Calculator Builder is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Dec 13, 2024 |
CVE-2023-40011
Cost Calculator Builder: A security weakness
Cost Calculator Builder is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Sep 30, 2024 |
CVE-2024-8379
Cost Calculator Builder: SQL injection
Cost Calculator Builder is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.2
NVD7.2
|
| Sep 07, 2024 |
CVE-2024-6010
Cost Calculator Builder PRO: A security weakness
Cost Calculator Builder PRO is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Aug 29, 2024 |
CVE-2024-43144
Cost Calculator Builder: SQL injection
Cost Calculator Builder is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE9.3
NVD9.8
|
| Jul 02, 2024 |
CVE-2024-6012
Cost Calculator Builder: A security weakness
Cost Calculator Builder is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Jul 02, 2024 |
CVE-2024-6011
Cost Calculator Builder: Cross-site scripting
Cost Calculator Builder is affected by cross-site scripting. Exploitation requires at least administrator-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE4.4
NVD4.8
|
| May 02, 2024 |
CVE-2024-4097
Cost Calculator Builder: Cross-site scripting
Cost Calculator Builder is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.2
NVDPending
|