CVE-2024-6010

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'create_cc_order' function, called from the Cost Calculator Builder plugin. This makes it possible for unauthenticated attackers to manipulate the price of orders submitted via the calculator. Note: this vulnerability was partially patched with the release of Cost Calculator Builder version 3.2.17.

• CWE-472

• https://docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-version
• https://plugins.trac.wordpress.org/browser/cost-calculator-builder/trunk/frontend/dist/order.jsIssue Tracking
• https://plugins.trac.wordpress.org/changeset/3172590/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/fc04e676-e394-488e-a239-95af5f865613?source=cveThird Party Advisory

Published

Sep 7, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6004A denial-of-service vulnerability was reported in some Lenov…6.5
• CVE-2024-6005A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4…3.5
• CVE-2024-6006A vulnerability was found in ZKTeco ZKBio CVSecurity V5000 4…3.5
• CVE-2024-6007A vulnerability classified as critical has been found in Net…9.8
• CVE-2024-6008A vulnerability, which was classified as critical, was found…8.8
• CVE-2024-6009A vulnerability has been found in itsourcecode Event Calenda…9.8
• CVE-2024-6011The Cost Calculator Builder plugin for WordPress is vulnerab…4.8
• CVE-2024-6012The Cost Calculator Builder plugin for WordPress is vulnerab…4.3
• CVE-2024-6013A vulnerability was found in itsourcecode Online Book Store …9.8
• CVE-2024-6014A vulnerability classified as critical has been found in its…9.8
• CVE-2024-6015A vulnerability classified as critical was found in itsource…9.8
• CVE-2024-6016A vulnerability, which was classified as critical, has been …9.8