These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Cost Calculator Builder plugin for WordPress has a vulnerability allowing unauthorized access to sensitive data due to a missing capability check on the `cost-calculator-custom-export-run` AJAX action. This action, handled by `CCBExportImport::export_calculators()`, only verifies a nonce but is vulnerable as the `ccb_export_nonce` is broadcast on every wp-admin page. Authenticated attackers with Subsc [truncated]
The Cost Calculator Builder plugin for WordPress, up to and including version 4.0.11, is vulnerable to Sensitive Information Exposure. This vulnerability allows unauthenticated attackers to extract plaintext Stripe secret keys, Razorpay secret keys, and PayPal client secrets from the page source of any page containing a calculator. This exposure occurs when the 'use in all calculators' option is enabled f [truncated]
The CVE record was published on 2026-07-11T04:17:16.650Z and has not been modified since then. The NVD entry is currently Received. This vulnerability affects the Motors – Car Dealership & Classified Listings Plugin for WordPress, specifically versions up to and including 1.4.112. The vulnerability class is Stored Cross-Site Scripting via Comment Content and User Biographical Info. The likely operational [truncated]