Loan Calculator
Loan Calculator has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Loan Calculator has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Loan Calculator is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-46442Loan Calculator <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Loan Calculator
Author
Mortgage Calculator
Loan Calculator adds a loan calculator with sliders to your WordPress site, so visitors can work out their loan repayments without leaving the page. Visitors drag the sliders to choose the loan amount and the term, pick their credit rating, and instantly see the repayment amount, the interest and the total they would pay. An optional “Apply Now” button sends them on to your application page. You can add this loan calculator with the Loan Calculator block in the block editor or with a shortcode. Loan calculator features Sliders for loan amount and loan term, with optional markers Credit rating selector: five ratings (Poor to Excellent) with an interest rate for each, which you can edit Or a flat rate with a second rate for larger loans, if you switch the credit rating selector off Results: repayment amount, rate, interest to pay, total to pay, loan amount, term, credit rating and processing fee, each of which you can show or hide and reorder Repayment period in days, weeks, months or years Optional processing (admin) fee, fixed or a percentage, with a minimum and maximum, and an optional term fee Effective or nominal APR conversion Currency symbol and position, thousands separator, decimals and rounding options “Apply Now” button that redirects to your own URL, and can pass the amount, term, rating and APR in the query string Editable captions and colors Gutenberg block and [lrc] shortcode Accepts a zero percent rate How to add the loan calculator In the block editor click the “+” button, search for “Loan Calculator” and add the block. Or paste the shortcode into a page or post: [lrc] Then open Settings > Repayment Calculator in the WordPress admin to set the slider ranges, interest rates, credit ratings, fees, currency, captions and colors. Use cases Lenders, loan brokers, credit unions, car finance and personal loan sites, and finance blogs that want an indicative loan calculator. Please note Results are indicative only and are not a loan offer.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C