Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/12/02 1:51 a.m.24 views

CVE-2025-12529 Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion

The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths int...

8.8CVSS0.00538EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/02 1:51 a.m.3 views

CVE-2025-12529 Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion

The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths int...

8.8CVSS7.2AI score0.00538EPSS
SaveExploits0References3
Rows per page
Query Builder