Attributed metadata history
Up to 100 retained publisher events per page for CVE-2025-9243. Withdrawals and unavailable references remain attributed to their publishers.
nvd
observed · 2026-10-12 09:48:03 UTC
The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorizedmodification of data due to a missing capability check on the get_cc_orders and update_order_status functions in all versions up to, and including, 3.5.32. This makes it possible for authenticated attackers, with Subscriber-level access and above, to access order management functions and modify order status.
Fingerprint: c8d0966376fd3d732fd6e0adcad1d59c0e6bced0be84093699dec8bb7ce1955a
nvd
available · 2026-10-12 04:02:58 UTC
available
Fingerprint: 1a480b1c570dfec82c1cc39b732387360c17935637e0981c7b0fd9c8798dc341