EUVD-2026-92091
GHSA-r437-pv5f-x5j6
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-reachable, unauthenticated, no-interaction disclosure (AV:N/AC:L/PR:N/UI:N); confidentiality lowered to C:L as the vague 'embedded sensitive data' does not clearly justify high impact; I:N/A:N per CWE-201.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
2DescriptionCVE.org
Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue affects Cost Calculator Builder: from n/a through 4.0.17.
Articles & Coverage 1
AnalysisAI
Unauthenticated information disclosure in the StylemixThemes Cost Calculator Builder WordPress plugin (all versions through 4.0.17) lets remote attackers retrieve sensitive data that the plugin embeds in the responses it sends to clients. The independent assessment rates the issue CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - network-reachable, low complexity, unauthenticated and requiring no user interaction, with confidentiality impact limited to Low - which is lower than the 7.5 feed-reported score and should be treated as the authoritative view. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target WordPress site have the StylemixThemes Cost Calculator Builder plugin installed and active at version 4.0.17 or earlier (no fixed version is identified in the input). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The input provides a CVSS 3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base 7.5), indicating a network-reachable, low-complexity, unauthenticated, no-interaction confidentiality-only flaw - a classic unauthenticated information-disclosure profile for a WordPress plugin. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch identified at time of analysis - the input data names 4.0.17 as the last affected release but does not provide a fixed version, so do not assume any specific 4.0.18+ build resolves the issue; confirm the patched version on the Patchstack advisory page (https://patchstack.com/database/wordpress/plugin/cost-calculator-builder/vulnerability/wordpress-cost-calculator-builder-plugin-4-0-17-sensitive-data-exposure-vulnerability) before upgrading, and apply that release as soon as it is published. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether Cost Calculator Builder is installed and active at version 4.0.17 or earlier on every WordPress instance; if it is not essential, deactivate and remove the plugin immediately, and if it must remain, restrict access to its calculator endpoints and pages through WAF, reverse proxy, or allowlisting, and subscribe to the StylemixThemes vendor advisory and CVE-2026-97307 updates. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Cost Calculator Builder
View allImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cos
The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before usin
The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could a
The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textarea.descript
Cost Calculator Builder for WordPress exposes live payment gateway credentials to any authenticated site user through a
Plaintext payment gateway secret key exposure in the Cost Calculator Builder WordPress plugin (all versions ≤ 4.0.11) al
Unauthenticated attackers can manipulate product prices in WooCommerce carts via an unprotected AJAX action in the Cost
The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Payment Status Bypass in all versions
The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and incl
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today