EUVD-2025-200177

The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths int...

CVE-2025-12529: External Control of File Name or Path

The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles function in all versions up to, and including, 3.6.3. This makes it possible for unauthenticated attackers to inject arbitrary file paths int...

PT-2025-48608

Name of the Vulnerable Software and Affected Versions Cost Calculator Builder plugin for WordPress versions up to and including 3.6.3 Description The Cost Calculator Builder plugin for WordPress is susceptible to arbitrary file deletion due to inadequate file path validation within the...