Medium severity5.3NVD Advisory· Published Sep 7, 2024· Updated Jun 17, 2026
CVE-2024-6010
CVE-2024-6010
Description
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'create_cc_order' function, called from the Cost Calculator Builder plugin. This makes it possible for unauthenticated attackers to manipulate the price of orders submitted via the calculator. Note: this vulnerability was partially patched with the release of Cost Calculator Builder version 3.2.17.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:stylemixthemes:cost_calculator_builder:*:*:*:*:pro:wordpress:*:*+ 1 more
- cpe:2.3:a:stylemixthemes:cost_calculator_builder:*:*:*:*:pro:wordpress:*:*range: <=3.1.96
- (no CPE)range: 0
- Range: <=3.2.1
Patches
Vulnerability mechanics
References
4- www.wordfence.com/threat-intel/vulnerabilities/id/fc04e676-e394-488e-a239-95af5f865613nvdThird Party Advisory
- plugins.trac.wordpress.org/browser/cost-calculator-builder/trunk/frontend/dist/order.jsnvdIssue Tracking
- docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-versionnvd
- plugins.trac.wordpress.org/changeset/3172590/nvd
News mentions
0No linked articles in our index yet.