Cost Calculator Builder

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Cost Calculator Builder

Information

Software Type Plugin
Software Slug cost-calculator-builder (view on wordpress.org)
Software Status Active
Software Author stylemix
Software Website wordpress.org
Software Downloads 3,007,192
Software Active Installs 30,000
Software Record Last Updated July 22, 2026

17 Vulnerabilities

Submit a Vulnerability
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys
5.3
CVE-2026-10865
Jul 10, 2026
Researcher: oper999
Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference
5.3
CVE-2025-14755
May 12, 2026
Researcher: andrea bocchetti
Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
5.3
CVE-2025-14757
Jan 15, 2026
Researcher: andrea bocchetti
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
8.8
CVE-2025-12529
Dec 1, 2025
Researcher: YC_Infosec
Cost Calculator Builder <= 3.5.32 - Missing Authorization
5.3
CVE-2025-62049
Oct 15, 2025
Researcher: Jarno Vos (jarnovos)
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
8.1
CVE-2025-9243
Oct 3, 2025
Researcher: Dmitrii Ignatyev
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2025-48277
May 19, 2025
Researcher: Krugov Artyom
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection
7.5
CVE-2025-39587
Apr 16, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
6.5
CVE-2025-2128
Apr 10, 2025
Researcher: mikemyers
Cost Calculator Builder <= 3.2.65 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-31414
Mar 29, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Cost Calculator Builder <= 3.2.42 - Cross-Site Request Forgery to Settings Update
4.3
CVE-2024-10892
Nov 27, 2024
Researcher: miguelxpn
Cost Calculator Builder <= 3.2.28 - Authenticated (Admin+) Stored Cross-Site Scripting
4.9
CVE-2024-8379
Sep 9, 2024
Researcher: Kientt
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection
10.0
CVE-2024-43144
Aug 7, 2024
Researcher: Trương Hữu Phúc (truonghuuphuc)
Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation
4.3
CVE-2024-6012
Jul 1, 2024
Researcher: Lucio Sá
Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-6011
Jul 1, 2024
Researcher: Guido Iván García
Cost Calculator Builder <= 3.1.42 - Improper Authorization
5.4
CVE-2023-40011
Aug 17, 2023
Researcher: Rafshanzani Suhada
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
Title Status CVE ID CVSS Researchers Date
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys Patched CVE-2026-10865 5.3 oper999 July 10, 2026
Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference Patched CVE-2025-14755 5.3 andrea bocchetti May 12, 2026
Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass Patched CVE-2025-14757 5.3 andrea bocchetti January 15, 2026
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion Patched CVE-2025-12529 8.8 YC_Infosec December 1, 2025
Cost Calculator Builder <= 3.5.32 - Missing Authorization Patched CVE-2025-62049 5.3 Jarno Vos (jarnovos) October 15, 2025
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions Patched CVE-2025-9243 8.1 Dmitrii Ignatyev October 3, 2025
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2025-48277 4.4 Krugov Artyom May 19, 2025
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection Patched CVE-2025-39587 7.5 Trương Hữu Phúc (truonghuuphuc) April 16, 2025
Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter Patched CVE-2025-2128 6.5 mikemyers April 10, 2025
Cost Calculator Builder <= 3.2.65 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-31414 6.4 Trương Hữu Phúc (truonghuuphuc) March 29, 2025
Cost Calculator Builder <= 3.2.42 - Cross-Site Request Forgery to Settings Update Patched CVE-2024-10892 4.3 miguelxpn November 27, 2024
Cost Calculator Builder <= 3.2.28 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-8379 4.9 Kientt September 9, 2024
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection Patched CVE-2024-43144 10.0 Trương Hữu Phúc (truonghuuphuc) August 7, 2024
Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation Patched CVE-2024-6012 4.3 Lucio Sá July 1, 2024
Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-6011 4.4 Guido Iván García July 1, 2024
Cost Calculator Builder <= 3.1.42 - Improper Authorization Patched CVE-2023-40011 5.4 Rafshanzani Suhada August 17, 2023
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Patched CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation