Medium
CVE-2026-97307
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filters
Medium
CVE-2026-7753
Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
Critical
CVE-2026-14900
Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter
Medium
CVE-2026-10865
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys
Medium
CVE-2025-14755
Cost Calculator Builder <= 4.0.1 - Unauthenticated Price Manipulation and Insecure Direct Object Reference
Medium
CVE-2025-14757
Cost Calculator Builder <= 3.6.9 - Missing Authorization to Unauthenticated Payment Status Bypass
High
CVE-2025-12529
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
Medium
CVE-2025-62049
Cost Calculator Builder <= 3.5.32 - Missing Authorization
High
CVE-2025-9243
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
Medium
CVE-2025-48277
Cost Calculator Builder <= 3.2.74 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2025-39587
Cost Calculator Builder <= 3.2.65 - Unauthenticated SQL Injection
Medium
CVE-2025-2128
Cost Calculator Builder <= 3.2.67 - Authenticated (Subscriber+) SQL Injection via order_ids Parameter
Medium
CVE-2025-31414
Cost Calculator Builder <= 3.2.65 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-11939
Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data
Medium
CVE-2024-10892
Cost Calculator Builder <= 3.2.42 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-8379
Cost Calculator Builder <= 3.2.28 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6010
Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price Manipulation
Critical
CVE-2024-43144
Cost Calculator Builder <= 3.2.15 - Unauthenticated SQL Injection
Medium
CVE-2024-6012
Cost Calculator Builder <= 3.2.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Content Creation
Medium
CVE-2024-6011
Cost Calculator Builder <= 3.2.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-4787
Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2024-4789
Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request Forgery
High
CVE-2024-4097
Cost Calculator Builder Pro <= 3.1.67 - Unauthenticated Cross-Site Scripting via SVG Upload
Medium
CVE-2023-40011
Cost Calculator Builder <= 3.1.42 - Improper Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.