Unknown Cost Calculator Builder vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Cost Calculator Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2024-10892stylemixthemescost_calculator_builder+2
EPSS score
0.19%
The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.7.2CVE-2024-8379stylemixthemescost_calculator_builder+2
EPSS score
0.55%
The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.