HarborGuard / CVE
Back to search
HIGHCVE-2026-24363Published Modified CNA Patchstack

CVE-2026-24363: WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in loopus WP Cost Estimation & Payment Forms Builder WP_Estimation_Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cost Estimation & Payment Forms Builder: from n/a through < 10.3.0.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • loopus / WP Cost Estimation & Payment Forms Builder
    ≤ 10.3.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
CVE-2026-24363: WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability | HarborGuard CVE