Skip to content
OpenAdvisories

Product · loopus

WP Cost Estimation & Payment Forms Builder

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    WP Cost Estimation < 9.660 - Upload Directory Traversal

    The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.

  • Medium 6.5

    WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Loopus WP Cost Estimation & Payment Forms Builder.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through 10.1.76.