Lucene search
+L

214 matches found

Nuclei
Nuclei
•added 2026/10/12 2:21 a.m.•29 views

Cost Calculator Builder <= 3.2.15 - SQL Injection

The Cost Calculator Builder plugin for WordPress is vulnerable to SQL Injection via discount codes in versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS5.8AI score0.01985EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/04 11:16 a.m.•14 views

CVE-2026-97307

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

7.5CVSS0.00245EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/04 9:08 a.m.•20 views

CVE-2026-97307

The StylemixThemes Cost Calculator Builder WordPress plugin (versions up to and including 4.0.17 ) is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows an attacker to Retrieve Embedded Sensitive Data from the application. No specific expl...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/04 9:08 a.m.•11 views

CVE-2026-97307 WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/04 9:08 a.m.•15 views

EUVD-2026-92091

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/04 9:08 a.m.•41 views

CVE-2026-97307 WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

7.5CVSS0.00245EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/04 12:00 a.m.•13 views

CVE-2026-97307: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/04 12:00 a.m.•10 views

PT-2026-104622

Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/10/02 9:02 a.m.•13 views

WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Intrudify in WordPress Plugin Cost Calculator Builder versions = 4.0.17...

7.5CVSS5.8AI score0.00245EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2026/10/01 12:32 a.m.•26 views

EUVD-2025-209816

The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference IDOR in all versions up to, and including, 4.0.1 only when used in combination with Cost Calculator Builder PRO. This is due to the ccbwoocommercepayment AJAX...

5.3CVSS5.8AI score0.00227EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/08/06 10:36 a.m.•22 views

WordPress Cost Calculator Builder plugin <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure vulnerability

Missing Authorization to Authenticated Subscriber+ Sensitive Information Disclosure vulnerability discovered by momopon1415 in WordPress Plugin Cost Calculator Builder versions = 3.6.17...

6.5CVSS5.8AI score0.00505EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/08/05 6:16 a.m.•30 views

CVE-2026-7753

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

6.5CVSS0.00505EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/08/05 5:27 a.m.•65 views

CVE-2026-7753 Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

6.5CVSS0.00505EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/08/05 5:27 a.m.•25 views

CVE-2026-7753

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

6.5CVSS5.8AI score0.00505EPSS
SaveExploits0References8
CVE
CVE
•added 2026/08/05 5:27 a.m.•80 views

CVE-2026-7753

Technical details are not publicly available in the provided documents. Monitor for updates.

6.5CVSS5.8AI score0.00505EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/08/05 5:27 a.m.•23 views

EUVD-2026-53033

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

6.5CVSS5.8AI score0.00505EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/08/05 5:27 a.m.•16 views

CVE-2026-7753 Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

6.5CVSS5.8AI score0.00505EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•8 views

CVE-2026-7753: Missing Authorization

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the cost-calculator-custom-export-run AJAX action handler CCBExportImport::exportcalculators in all versions up to, and including, 3.6.17. The handler only...

6.5CVSS5.8AI score0.00505EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/05 12:00 a.m.•7 views

PT-2026-67964

Name of the Vulnerable Software and Affected Versions Cost Calculator Builder versions prior to 3.6.18 Description An issue allows authenticated users with Subscriber-level access and above to gain unauthorized access to sensitive data. The cost-calculator-custom-export-run AJAX action, handled b...

6.5CVSS5.9AI score0.00505EPSS
SaveExploits0References9
Patchstack
Patchstack
•added 2026/07/30 8:11 a.m.•27 views

WordPress Cost Calculator Builder PRO plugin <= 4.0.3 - Unauthenticated Remote Code Execution vulnerability

Unauthenticated Remote Code Execution vulnerability discovered by Nox Axter in WordPress Plugin Cost Calculator Builder Pro versions = 4.0.3...

9.8CVSS6AI score0.01282EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder