{"id":"CVE-2019-25295","aliases":["EUVD-2026-1597","GHSA-4446-h7rg-g9q3"],"status":"published","title":"WP Cost Estimation \u003c 9.660 - Upload Directory Traversal","description":"The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00614,"percentile":0.49709,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2026-01-08T01:50:10Z","modified":"2026-06-17T02:32:00Z","products":[{"vendor":"loopus","product":"wp cost estimation \u0026 payment forms builder"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/65a9e877-e870-4e36-985d-c0629abe3f78?source=cve"},{"url":"https://www.wordfence.com/blog/2019/02/vulnerabilities-patched-in-wp-cost-estimation-plugin/"},{"url":"https://codecanyon.net/item/wp-cost-estimation-payment-forms-builder/7818230"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25295"},{"url":"https://www.wordfence.com/blog/2019/02/vulnerabilities-patched-in-wp-cost-estimation-plugin"},{"url":"https://github.com/advisories/GHSA-4446-h7rg-g9q3"}],"sources":{"cve":[{"id":"CVE-2019-25295","title":"WP Cost Estimation \u003c 9.660 - Upload Directory Traversal","description":"The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.","status":"published","published":"2026-01-08T01:50:10.508Z","modified":"2026-04-08T16:57:51.677Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:20:19.737165Z"}],"euvd":[{"id":"EUVD-2026-1597","description":"The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.","status":"published","published":"2026-01-08T01:50:10Z","modified":"2026-04-08T16:57:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:24:55.662835Z"}],"ghsa":[{"id":"GHSA-4446-h7rg-g9q3","title":"The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in...","description":"The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.","status":"published","published":"2026-01-08T03:30:23Z","modified":"2026-01-08T03:30:23Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:05:32.392087Z"}],"nvd":[{"id":"CVE-2019-25295","description":"The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows attackers to overwrite any file with a whitelisted type on an affected site.","status":"published","published":"2026-01-08T02:15:52.447Z","modified":"2026-06-17T02:32:00.057Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:05:49.934131Z"}]}}