Financial Calculator
Financial Calculator has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Financial Calculator has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by Peter Thaleikis. Financial Calculator is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2024-11783Financial Calculator <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Financial Calculator
Author
Mortgage Calculator
The Financial Calculator plugin gives your visitors a loan calculator and a finance calculator that show indicative repayments instantly, without a page reload. Add an optional application form and they can send a finance enquiry to you straight from the same page. It suits car dealers, brokers, lenders and any site that offers loans or finance. There are two calculators. Add them with the Financial Calculator block in the block editor (choose finance or loan in the block sidebar), or with a shortcode for each: a finance calculator for vehicle-style finance (price, deposit, trade-in, rate) and a loan calculator that offers a list of loan types and rates that you define. Loan calculator features Finance calculator: price, finance rate, deposit and trade-in allowance, with monthly payments shown for 12, 24, 36, 48, 60 and 72 months and the total cost of the credit Loan calculator: choose a loan type, enter the loan amount and the repayment period in years, and see weekly, fortnightly and monthly payments, total repayment and total interest Optional finance application form that is sent by email to the address you set Settings page for the default finance rate, application email address, currency code and symbol, and the list of loan types and rates Show or hide the application button Shortcode attributes to override the rate or fix the price Gutenberg block with a live preview, plus the [finance_calculator] and [loan_calculator] shortcodes Calculates in the browser, so results appear immediately How to add the loan calculator In the block editor click the “+” button, search for “Financial Calculator” and add the block. In the block sidebar choose the finance calculator or the loan calculator and, if you like, set a rate and a fixed price. Or add one of the shortcodes to a page or post: [finance_calculator] [loan_calculator] Override the default rate for one calculator, or fix the price: [finance_calculator rate="9.9" price="16000"] Use digits only in the price (16000, not 16,000). Then open the Finance Calculator settings page in the admin area to set the default rate, application email, currency and, for the loan calculator, the loan options in the format name|percentage,name|percentage, for example Motor Loan|7.9,Standard Loan|9. Use cases Car finance and dealership websites Loan brokers, lenders and credit unions Personal, motor and other loan enquiry pages Blogs and comparison sites that want an indicative repayment calculator Please note The figures are indicative only and are not a loan offer.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C