Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:cost_calculator_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductCost Calculator Builder (be2157a0-0b3c-5dce-b63f-88c786f541b8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8379 vulnerable 2026-06-08 07:00:24.448948 Cost Calculator Builder < 3.2.29 - Admin+ SQL Injection
The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin.
Published: 2024-09-30T06:00:07.069Z
Updated: 2024-10-01T14:13:20.982Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10892 vulnerable 2026-06-08 06:23:47.925272 Cost Calculator Builder < 3.2.43 - Settings update via CSRF
The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
Published: 2024-12-18T06:00:16.137Z
Updated: 2024-12-18T15:10:31.241Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.