WordPress plugin
Cost Calculator Builder PRO security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium3
- Low0
All Cost Calculator Builder PRO vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Remote Code Execution via 'orderDetails' Parameter ≤4.0.3Update to 4.0.4 | CVE-2026-14900 | |
| High7.5 | Unauthenticated SQL Injection via data ≤3.2.15Update to 3.2.16 | CVE-2024-11939 | |
| Medium5.3 | Unauthenticated Price Manipulation ≤3.2.1Update to 3.2.2 | CVE-2024-6010 | |
| Medium5.8 | Unauthenticated Arbitrary Email Sending ≤3.1.75Update to 3.1.76 | CVE-2024-4787 | |
| Medium6.4 | Authenticated (Subscriber+) Server-Side Request Forgery ≤3.1.72Update to 3.1.73 | CVE-2024-4789 | |
| High7.2 | Unauthenticated Cross-Site Scripting via SVG Upload ≤3.1.67Update to 3.1.68 | CVE-2024-4097 |
- Critical9.8Unauthenticated Remote Code Execution via 'orderDetails' Parameter
≤4.0.3Update to 4.0.4
- High7.5Unauthenticated SQL Injection via data
≤3.2.15Update to 3.2.16
- Medium5.3Unauthenticated Price Manipulation
≤3.2.1Update to 3.2.2
- Medium5.8Unauthenticated Arbitrary Email Sending
≤3.1.75Update to 3.1.76
- Medium6.4Authenticated (Subscriber+) Server-Side Request Forgery
≤3.1.72Update to 3.1.73
- High7.2Unauthenticated Cross-Site Scripting via SVG Upload
≤3.1.67Update to 3.1.68
Cost Calculator Builder PRO: common questions
Does Cost Calculator Builder PRO have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in Cost Calculator Builder PRO: 1 critical, 2 high, 3 medium. None are known to affect version null.
How do I check which version of Cost Calculator Builder PRO I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Cost Calculator Builder PRO vulnerability?
CVE-2026-14900, published Jul 28, 2026: Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter. Severity: Critical (CVSS 9.8).
Is any Cost Calculator Builder PRO vulnerability listed in CISA KEV?
No. None of the known Cost Calculator Builder PRO vulnerabilities is currently listed in the CISA KEV catalog.