EUVD-2025-32414

| CVE-2025-9243 HIGH
2025-10-04 [email protected]
Authentication Bypass WordPress
8.1
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

3
Analysis Generated
Mar 13, 2026 - 19:56 vuln.today
EUVD ID Assigned
Mar 13, 2026 - 19:56 euvd
EUVD-2025-32414
CVE Published
Oct 04, 2025 - 03:15 nvd
HIGH 8.1

DescriptionNVD

The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the get_cc_orders and update_order_status functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with Subscriber-level access and above, to access order management functions and modify order status.

AnalysisAI

A security vulnerability in Cost Calculator Builder (CVSS 8.1). High severity vulnerability requiring prompt remediation.

Technical ContextAI

CWE-862 (Missing Authorization). CVSS 8.1 indicates high severity. Affects Cost Calculator Builder.

RemediationAI

Monitor vendor channels for patch availability.

Share

EUVD-2025-32414 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy