CVE-2024-10892: Cost Calculator Builder < 3.2.43 - Settings update via CSRF
Description
The Cost Calculator Builder WordPress plugin before 3.2.43 does not have CSRF checks in some AJAX actions, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.
Classification
CVE ID: CVE-2024-10892
Affected Products
Vendor: Unknown
Product: Cost Calculator Builder
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.48% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)