Medium severity5.8NVD Advisory· Published Jun 19, 2024· Updated Jun 17, 2026

CVE-2024-4787

Description

The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.75. This is due to insufficient limitations on the email recipient and the content in the 'send_pdf' and the 'send_pdf_front' functions which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Cost Calculator Builder Proinferred2 versions
<=3.1.75+ 1 more
- (no CPE)range: <=3.1.75
- (no CPE)range: <=3.1.75
Package: https://wordpress.org/plugins/cost-calculator-builder-pro

Patches

Vulnerability mechanics

References

docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-versionnvd
www.wordfence.com/threat-intel/vulnerabilities/id/035ada56-541d-47b3-8348-3401d94bb509nvd

News mentions

No linked articles in our index yet.

cvss	0.377
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000