cost calculator builder vulnerabilities and fixes

Recent CVEs affecting cost calculator builder, with upgrade or downgrade steps. 7 tracked.

Also searched as: costcalculatorbuilder.

cost calculator builder has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-01-16. Highest priority: CVE-2024-43144 (score 58/100).

• CVE-2025-14757 MEDIUM 5.3 UPGRADE The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all
• CVE-2024-8379 HIGH 7.2 UPGRADE The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter b
• CVE-2024-6012 MEDIUM 4.3 UPGRADE The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a m
• CVE-2024-6011 MEDIUM 4.4 UPGRADE The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textare
• CVE-2024-6010 MEDIUM 5.3 UPGRADE The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to
• CVE-2024-43144 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix
• CVE-2024-10892 MEDIUM 5.4 UPGRADE The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, whi

FAQ

How do I fix cost calculator builder vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cost calculator builder being exploited right now?

None of the tracked cost calculator builder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cost calculator builder CVE should I patch first?

CVE-2024-43144 currently ranks highest (58/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stylemix.

RSS feed for cost calculator builder · ← Back to latest CVEs