WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Cost Calculator Builder

WP Cost Calculator is a simple and powerful tool that lets you create price estimation forms. Easily give your clients information about your services …

18Reported vulnerabilities
10Highest CVSS score
4.0.15Latest version
20,000+Active installs

What to do now

Update Cost Calculator Builder to 4.0.3 or later. 18 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 15, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-8379 High 7.2 0.5% Before 3.2.29 3.2.29 September 30, 2024
CVE-2024-43144 Critical 10 2.0% 3.2.15 and earlier 3.2.16 August 7, 2024
CVE-2024-10892 Medium 5.4 0.2% Before 3.2.43 3.2.43 December 18, 2024
CVE-2025-12529 High 8.8 0.5% 0 to 3.6.3 (inclusive) 3.6.4 December 2, 2025
CVE-2024-6011 Medium 4.8 0.4% Before 3.2.13 3.2.13 July 2, 2024
CVE-2025-9243 High 8.1 0.3% 0 to 3.5.32 (inclusive) 3.5.33 October 4, 2025
CVE-2025-39587 High 7.5 0.4% 3.2.65 and earlier 3.2.68 April 16, 2025
CVE-2026-7753 Medium 6.5 0.3% 0 to 3.6.17 (inclusive) 4.0.3 August 5, 2026
CVE-2025-2128 Medium 6.5 0.4% 0 to 3.2.67 (inclusive) 3.2.68 April 11, 2025
CVE-2025-31414 Medium 6.4 0.2% 3.2.65 and earlier 3.2.66 March 29, 2025
CVE-2026-10865 Medium 5.3 0.6% 0 to 4.0.11 (inclusive) 4.0.12 July 11, 2026
CVE-2023-40011 Medium 5.4 0.6% Before 3.1.43 3.1.43 August 17, 2023
CVE-2025-14755 Medium 5.3 0.2% 0 to 4.0.1 (inclusive) 4.0.2 May 13, 2026
CVE-2025-14757 Medium 5.3 0.3% 0 to 3.6.9 (inclusive) 3.6.10 January 16, 2026
CVE-2025-62049 Medium 5.3 0.3% 3.5.32 and earlier 3.5.33 October 15, 2025
CVE-2024-6010 Medium 5.3 0.4% 0 to 3.2.1 (inclusive)
0 to 3.2.1 (inclusive)		 3.2.2 September 7, 2024
CVE-2025-48277 Medium 4.4 0.2% 3.2.74 and earlier 3.5.0 May 19, 2025
CVE-2024-6012 Medium 4.3 0.4% Before 3.2.13 3.2.13 July 2, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.