Exploit for CVE-2026-14900

CVE-2026-14900: Unauthenticated RCE in Cost Calculator Builder...

CVE-2024-6010: External Control of Assumed-Immutable Web Parameter

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'createccorder' function, called from the Cost Calculator Builder...