Mortgage Calculators WP

Mortgage Calculators WP has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Mortgage Calculators WP has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Mortgage Calculators WP is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.6/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Mortgage Calculators WP vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-32581

Mortgage Calculators WP <= 1.56 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Mortgage Calculators WP banner
Latestv1.63

Mortgage Calculators WP

8blocks

Author

8blocks

4.7(10)
94/100
Last Updated
2026-03-24 (6mo ago)
Active Installs
3,000+
Downloads
34,361
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 6.9.7
Created
2018-10-22 (8y ago)

Mortgage Calculators WP is a very easy-to-use wordpress plugin built with the purpose of providing mortgage and other finance professionals with a mortgage calculator that not only delivers accurate home loan estimates, but also the ability for the users to instantly receive a free copy of those estimates via email while also providing the website owner with an email lead everytime a user requests a copy of their estimated values. You can view a live demo of our mortgage calculators as seen on our loan officer website themes. Simply preview any of the sites provided and scroll down to view the calculator as it would appear on your website. 4 Additional Calculators & Support Available Here

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C