What’s Vulnerable › Products

loopus WP Cost Estimation & Payment Forms Builder vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your loopus WP Cost Estimation & Payment Forms Builder version is affected

Latest loopus WP Cost Estimation & Payment Forms Builder vulnerabilities

• CVE-2026-9253 — WP Cost Estimation & Payment Forms Builder (E&P Forms) <= 10.5.97 - Unauthenticated Stored Cross-Site Scripting via 'customerInfos' Parameter (CVSS 7.2)
• CVE-2026-24363 — WordPress WP Cost Estimation & Payment Forms Builder plugin < 10.3.0 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2019-25296 — WP Cost Estimation <= 9.642 - Missing Authorization to Arbitrary File Upload/Delete (CVSS 9.8)
• CVE-2019-25295 — WP Cost Estimation < 9.660 - Upload Directory Traversal (CVSS 6.5)
• CVE-2024-32510 — WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-32509 — WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.76 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2024-30489 — WordPress WP Cost Estimation & Payment Forms Builder plugin <= 10.1.75 - SQL Injection vulnerability (CVSS 8.5)