CVE-2024-6010

The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'create_cc_order' function, called from the Cost Calculator Builder plugin. This makes it possible for unauthenticated attackers to manipulate the price of orders submitted via the calculator. Note: this vulnerability was partially patched with the release of Cost Calculator Builder version 3.2.17.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-version
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/trunk/frontend/dist/order.js	Issue Tracking
https://plugins.trac.wordpress.org/changeset/3172590/
https://www.wordfence.com/threat-intel/vulnerabilities/id/fc04e676-e394-488e-a239-95af5f865613?source=cve	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:stylemixthemes:cost_calculator_builder:*:*:*:*:pro:wordpress:*:*

History

No history.

Information

Published : 2024-09-07 12:15

Updated : 2024-10-23 16:15

NVD link : CVE-2024-6010

Mitre link : CVE-2024-6010

CVE.ORG link : CVE-2024-6010

JSON object : View

Products Affected

stylemixthemes

cost_calculator_builder

CWE

CWE-472

External Control of Assumed-Immutable Web Parameter

NVD-CWE-Other

{"id": "CVE-2024-6010", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2024-09-07T12:15:12.067", "references": [{"url": "https://docs.stylemixthemes.com/cost-calculator-builder/changelog-1/changelog-pro-version", "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/browser/cost-calculator-builder/trunk/frontend/dist/order.js", "tags": ["Issue Tracking"], "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3172590/", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/fc04e676-e394-488e-a239-95af5f865613?source=cve", "tags": ["Third Party Advisory"], "source": "security@wordfence.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-472"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.2.1. This is due to the plugin allowing the price field to be manipulated prior to processing via the 'create_cc_order' function, called from the Cost Calculator Builder plugin. This makes it possible for unauthenticated attackers to manipulate the price of orders submitted via the calculator. Note: this vulnerability was partially patched with the release of Cost Calculator Builder version 3.2.17."}, {"lang": "es", "value": "El complemento Cost Calculator Builder PRO para WordPress es vulnerable a la manipulaci\u00f3n de precios en todas las versiones hasta la 3.1.96 incluida. Esto se debe a que el complemento permite manipular el campo de precio antes del procesamiento a trav\u00e9s de la funci\u00f3n 'create_cc_order', llamada desde el complemento Cost Calculator Builder. Esto hace posible que atacantes no autenticados manipulen el precio de los pedidos enviados a trav\u00e9s de la calculadora. Nota: esta vulnerabilidad fue parcialmente corregida con el lanzamiento de la versi\u00f3n 3.2.17 de Cost Calculator Builder."}], "lastModified": "2024-10-23T16:15:10.483", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:stylemixthemes:cost_calculator_builder:*:*:*:*:pro:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "5D654602-1087-45AE-9CED-37061ED664D9", "versionEndIncluding": "3.1.96"}], "operator": "OR"}]}], "sourceIdentifier": "security@wordfence.com"}