Skip to content
OpenAdvisories
High · 7.5 CVE-2026-24363 EUVD-2026-15559

WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability

Published Mar 25, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: loopus Product: WP Cost Estimation & Payment Forms Builder

Description

Missing Authorization vulnerability in loopus WP Cost Estimation & Payment Forms Builder WP_Estimation_Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through < 10.3.0.

Affected products

VendorProductAffectedFixed
loopus WP Cost Estimation & Payment Forms Builder ≤ 10.3.0 —

References