Cost Calculator Builder PRO vulnerabilities

3 known vulnerabilities in Cost Calculator Builder PRO from StylemixThemes. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Cost Calculator Builder PRO: Improper Control of Generation of Code

  CVE-2026-14900Jul 29, 2026StylemixThemesEPSS 1.07%

  The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the js_to_php function. This is due to insufficient sanitization of the orderDetails[*].originalValue field, which is in

• 7.5 High severity

  Cost Calculator Builder PRO: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-11939Jan 8, 2025StylemixThemes

  The Cost Calculator Builder PRO plugin for WordPress is vulnerable to blind time-based SQL Injection via the ‘data’ parameter in all versions up to, and including, 3.2.15 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar

• 7.2 High severity

  Cost Calculator Builder PRO: Improper Neutralization of Input During Web Page Generation

  CVE-2024-4097May 2, 2024StylemixThemes

  The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG upload feature in all versions up to, and including, 3.1.67 due to insufficient input sanitization and output escaping. This makes it possible for unauthe