Login Request a demo
Medium severity · published Jul 11, 2026
CVE-2026-10865
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitive Information Exposure of Payment Gateway Secret Keys
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
The Cost Calculator Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.11 via the (template body). This makes it possible for unauthenticated attackers to extract the plaintext Stripe secret key, Razorpay secret key, and PayPal client_secret embedded in the page source of any page containing a calculator, enabling full control of the merchant's payment gateway accounts. This exposure only occurs when the 'use in all calculators' option is enabled for one or more payment gateways in the plugin's global settings.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CC
Cost Calculator Builder · stylemix
through 4.0.11 · source: vendor
Affected product
CC
Cost Calculator Builder
stylemix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10865
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10865
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/tags/3.6.17/includes/functions.php#L748
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/tags/3.6.17/templates/frontend/render.php#L28
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/tags/3.6.17/templates/frontend/render.php#L281
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/tags/3.6.17/templates/frontend/render.php#L61
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/tags/4.0.5/includes/functions.php#L748
plugins.trac.wordpress.org
https://plugins.trac.wordpress.org/browser/cost-calculator-builder/tags/4.0.5/templates/frontend/render.php#L28
More from Cost Calculator Builder
9.3
CVE-2025-39587
WordPress Cost Calculator Builder plugin <= 3.2.65 - SQL Injection Vulnerability
8.8
CVE-2025-12529
Cost Calculator Builder <= 3.6.3 - Unauthenticated Arbitrary File Deletion
8.1
CVE-2025-9243
Cost Calculator Builder <= 3.5.32 - Authenticated (Subscriber+) Missing Authorization via get_cc_orders/update_order_status Functions
6.5
CVE-2026-7753
Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure
6.5
CVE-2025-62049
WordPress Cost Calculator Builder plugin <= 3.5.32 - Broken Access Control vulnerability