CVE-2024-4787: Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email Sending
The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.75. This is due to insufficient limitations on the email recipient and the content in the 'sendpdf' and the 'sendpdffront' functions which are reachable via AJAX. This makes it possible for unauthenticated attackers to send emails with any content to any recipient.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress plugin: Cost Calculator Builder PROto a version that resolves this vulnerability.Fixed in 3.1.75 - Configuration
Update the plugin so the AJAX handlers for 'send_pdf' and 'send_pdf_front' enforce authentication and properly validate/limit the email recipient and the email content; ensure unauthenticated access cannot trigger arbitrary email sending.
WordPress plugin: Cost Calculator Builder PRO send_pdf / send_pdf_front (AJAX email sending) = Add authentication and strict limitations on email recipient and email content before sending
Event History
Frequently Asked Questions
What is the severity of CVE-2024-4787?
CVE-2024-4787 has been classified as a medium severity vulnerability due to its potential for arbitrary email sending.
How do I fix CVE-2024-4787?
To fix CVE-2024-4787, update Cost Calculator Builder PRO to version 3.1.76 or later.
What versions are affected by CVE-2024-4787?
CVE-2024-4787 affects all versions of Cost Calculator Builder PRO up to and including 3.1.75.
What are the implications of CVE-2024-4787?
The implications of CVE-2024-4787 include the risk of unauthorized email sending which could lead to spam or phishing attacks.
Is there a workaround for CVE-2024-4787?
Currently, the recommended approach is to update the plugin rather than relying on a workaround for CVE-2024-4787.