Advisories · Technology
StylemixThemes Cost Calculator Builder PRO.
Every CVE that names StylemixThemes Cost Calculator Builder PRO among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter
- StylemixThemes Cost Calculator Builder PRO
- Code injection
- CVSS 7.5 High
Cost Calculator Builder PRO <= 3.2.15 - Unauthenticated SQL Injection via data
- StylemixThemes Cost Calculator Builder PRO
- SQL injection
- CVSS 5.3 Medium
Cost Calculator Builder PRO <= 3.2.1 - Unauthenticated Price Manipulation
- StylemixThemes Cost Calculator Builder PRO
- CWE-472
- CVSS 5.8 Medium
Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email Sending
- StylemixThemes Cost Calculator Builder PRO
- CWE-20
- CVSS 6.4 Medium
Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request Forgery
- StylemixThemes Cost Calculator Builder PRO
- Server-side request forgery (SSRF)
- CVSS 7.2 High
Cost Calculator Builder Pro <= 3.1.67 - Unauthenticated Cross-Site Scripting via SVG Upload
- StylemixThemes Cost Calculator Builder PRO
- Cross-site scripting (XSS)