Design vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Design products: 4 record(s), with severity, exploitation and fixes.

Stylish Cost Calculator 3 Stylish Price List 1

Exploited only (KEV) →

CVE-2026-54847 High · 7.5 CWE-862 Jun 26, 2026

WordPress Stylish Cost Calculator plugin <= 8.3.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Stylish Cost Calculator <= 8.3.9 versions.

CVE-2026-24630 Medium · 6.5 CWE-79 Jan 23, 2026

WordPress Stylish Cost Calculator plugin <= 8.2.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows Stored XSS.This issue affects Stylish Cost Calculator: from n/a through <= 8.2.9.

CVE-2025-66122 Medium · 5.3 CWE-862 Dec 16, 2025

WordPress Stylish Price List plugin <= 7.2.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Design Stylish Price List stylish-price-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Stylish Price List: from n/a through <= 7.2.2.

CVE-2025-66091 Medium · 6.5 CWE-79 Nov 21, 2025

WordPress Stylish Cost Calculator plugin <= 8.1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Design Stylish Cost Calculator stylish-cost-calculator allows DOM-Based XSS.This issue affects Stylish Cost Calculator: from n/a through <= 8.1.5.