WP Cost Estimation & Payment Forms Builder

WP Cost Estimation & Payment Forms Builder has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 9.9 out of 10. Severity breakdown: 2 critical and 1 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (33%). Other recurring categories include Missing Authorization, Path Traversal.

Every one of the 6 issues recorded for WP Cost Estimation & Payment Forms Builder has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (3) reported by Rafie Muhammad.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Cost Estimation & Payment Forms Builder vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9CVE-2024-30489

WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

6 records


2026-07-08 00:00	WP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' Parameter WP Cost Estimation & Payment Forms… <= 10.5.97	`CVE-2026-9253`	7.2 High	Luc Huynh from Noventiq RedTeam	Yes
2024-04-15 00:00	WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Reflected Cross-Site Scripting WP Cost Estimation & Payment Forms… <= 10.1.75	`CVE-2024-32510`	6.1 Medium	Rafie Muhammad	Yes
2024-04-15 00:00	WP Cost Estimation & Payment Forms Builder <= 10.1.76 - Missing Authorization WP Cost Estimation & Payment Forms… <= 10.1.76	`CVE-2024-32509`	5.3 Medium	Rafie Muhammad	Yes
2024-03-28 00:00	WP Cost Estimation & Payment Forms Builder <= 10.1.75 - Authenticated (Contributor+) SQL Injection WP Cost Estimation & Payment Forms… <= 10.1.75	`CVE-2024-30489`	9.9 Critical	Rafie Muhammad	Yes
2019-02-14 00:00	WP Cost Estimation < 9.660 - Upload Directory Traversal WP Cost Estimation & Payment Forms… < 9.660	`CVE-2019-25295`	6.5 Medium	Mikey Veenstra	Yes
2019-02-14 00:00	WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete WP Cost Estimation & Payment Forms… < 9.644	`CVE-2019-25296`	9.8 Critical	Mikey Veenstra	Yes

Showing 1–6 of 6 reports