Skip to content
OpenAdvisories

Product · loopus

WP Cost Estimation & Payment Forms Builder

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-25296

    WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete

    The WP Cost Estimation plugin for WordPress is vulnerable to arbitrary file uploads and deletion due to missing file type validation in the lfb_upload_form and lfb_removeFile AJAX actions in versions up to, and including, 9.642. This makes it possible for una…

    loopus WP Cost Estimation & Payment Forms Builder Web / CMS