Input validation vulnerability in WP Cost Estimation 9.644

The WP Cost Estimation plugin for WordPress is vulnerable to a security issue in versions up to, and including, 9.642. This issue could allow an unauthenticated attacker to upload and delete files on the affected site’s server. This means that the attacker could potentially upload malicious code onto the server, or delete crucial files like a database configuration file and upload their own version in its place.

Detected in:

WP Cost Estimation fixed vulnerable versions: >= * < 9.644

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.