CVE-2026-97307

Summary

This vulnerability allows attackers to retrieve sensitive data that was embedded in sent information, potentially exposing confidential details through the Cost Calculator Builder plugin. This is a high-severity issue that could lead to data exposure without requiring any authentication or user interaction.

Exploitability

Exploitation is relatively straightforward with no prerequisites needed since the vulnerability affects unauthenticated users and requires only sending data through the plugin.

Blast radius

The impact could be significant as attackers can extract sensitive information from all calculator outputs, potentially exposing customer data, pricing details, or other confidential information shared through the plugin.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 4.0.18 or later to address this sensitive data exposure vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.