Skip to content
OpenAdvisories
Unscored CVE-2021-24820 EUVD-2021-11732GHSA-7pg3-r4wv-7xmh

Cost Calculator <= 1.6 - Authenticated Local File Inclusion

Published Feb 28, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Cost Calculator WordPress plugin through 1.6 allows authenticated users (Contributor+ in versions < 1.5, and Admin+ in versions <= 1.6) to perform path traversal and local PHP file inclusion on Windows Web Servers via the Cost Calculator post's Layout

Affected products

VendorProductAffectedFixed
— Cost Calculator 1.6 – ≤ 1.6 —

References