Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Cost Calculator Builder plugin may leak private data

CVE-2026-97307 · published 15 days ago
Summary

The Cost Calculator Builder plugin for WordPress (versions up to 4.0.17) can unintentionally include confidential information when it sends data to other systems. This could let attackers see details that should remain private, such as user inputs or configuration settings. Update the plugin to the latest version or remove it if a fix is not available.

What to do
  • Update stylemixthemes cost calculator builder to version 4.0.18.
Affected software
VendorProductAffected versions
stylemixthemes cost calculator builder <= 4.0.17
Fix: upgrade to 4.0.18
Original advisory text
WordPress Cost Calculator Builder plugin <= 4.0.17 - Sensitive Data Exposure vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-201Insertion of Sensitive Information Into Sent Data
Timeline
Published4 Oct 2026
Updated14 Oct 2026
First seen4 Oct 2026
Sources
CVE-2026-97307 · NVD
CVE-2026-97307 · MITRE
Track software like this
Free during beta