WordSec
WordSec

Cost Calculator Builder

Explore Cost Calculator Builder vulnerabilities across all versions. Currently tracking 17 known vulnerabilities, including severity, impact, and patch status.

01234567891018.07.2023Today18.07.20236.1Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get CVSS 6.1 · 18.07.202317.08.20235.4Cost Calculator Builder <= 3.1.42 - Improper Authorization CVSS 5.4 · 17.08.202301.07.20244.4Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 01.07.20244.3Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation CVSS 4.3 · 01.07.202407.08.202410.0Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection CVSS 10.0 · 07.08.202409.09.20244.9Cost Calculator Builder <= 3.2.28 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.9 · 09.09.202427.11.20244.3Cost Calculator Builder <= 3.2.42 - Cross-Site Request Forgery to Settings Update CVSS 4.3 · 27.11.202429.03.20256.4Cost Calculator Builder <= 3.2.65 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 29.03.202510.04.20256.5Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter CVSS 6.5 · 10.04.202516.04.20257.5Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection CVSS 7.5 · 16.04.202519.05.20254.4Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 19.05.202503.10.20258.1Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions CVSS 8.1 · 03.10.202515.10.20255.3Cost Calculator Builder <= 3.5.32 - Missing Authorization CVSS 5.3 · 15.10.202501.12.20258.8Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion CVSS 8.8 · 01.12.202515.01.20265.3Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass CVSS 5.3 · 15.01.202612.05.20265.3Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference CVSS 5.3 · 12.05.202610.07.20265.3Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys CVSS 5.3 · 10.07.2026

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all Cost Calculator Builder vulnerabilities before they are exploited.

Vulnerability Records

17 records
2026-07-10 17:35
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys
Cost Calculator Builder
<= 4.0.11
CVE-2026-10865
5.3
Medium
oper999Yes
2026-05-12 15:19
Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference
Cost Calculator Builder
<= 4.0.1
CVE-2025-14755
5.3
Medium
andrea bocchettiYes
2026-01-15 20:25
Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
Cost Calculator Builder
<= 3.6.9
CVE-2025-14757
5.3
Medium
andrea bocchettiYes
2025-12-01 11:27
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
Cost Calculator Builder
<= 3.6.3
CVE-2025-12529
8.8
High
YC_InfosecYes
2025-10-15 00:00
Cost Calculator Builder <= 3.5.32 - Missing Authorization
Cost Calculator Builder
<= 3.5.32
CVE-2025-62049
5.3
Medium
Jarno Vos (jarnovos)Yes
2025-10-03 14:11
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
Cost Calculator Builder
<= 3.5.32
CVE-2025-9243
8.1
High
Dmitrii IgnatyevYes
2025-05-19 00:00
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
Cost Calculator Builder
<= 3.2.74
CVE-2025-48277
4.4
Medium
Krugov ArtyomYes
2025-04-16 00:00
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection
Cost Calculator Builder
<= 3.2.65
CVE-2025-39587
7.5
High
Trương Hữu Phúc (truonghuuphuc)Yes
2025-04-10 20:32
Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
Cost Calculator Builder
<= 3.2.67
CVE-2025-2128
6.5
Medium
mikemyersYes
2025-03-29 00:00
Cost Calculator Builder <= 3.2.65 - Authenticated (Contributor+) Stored Cross-Site Scripting
Cost Calculator Builder
<= 3.2.65
CVE-2025-31414
6.4
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
Showing 1–10 of 17 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C