{"id":"CVE-2024-30489","aliases":["EUVD-2024-28409","GHSA-mggj-4hpc-24pc"],"status":"published","title":"WordPress WP Cost Estimation \u0026 Payment Forms Builder plugin \u003c= 10.1.75 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Cost Estimation \u0026 Payment Forms Builder.This issue affects WP Cost Estimation \u0026 Payment Forms Builder: from n/a through 10.1.75.","severity":{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00488,"percentile":0.42272,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2024-03-31T18:18:31Z","modified":"2026-06-17T07:27:03Z","products":[{"vendor":"loopus","product":"wp cost estimation \u0026 payment forms builder"}],"references":[{"url":"https://patchstack.com/database/vulnerability/wp-estimation-form/wordpress-wp-cost-estimation-payment-forms-builder-plugin-10-1-75-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-30489"},{"url":"https://github.com/advisories/GHSA-mggj-4hpc-24pc"}],"sources":{"cve":[{"id":"CVE-2024-30489","title":"WordPress WP Cost Estimation \u0026 Payment Forms Builder plugin \u003c= 10.1.75 - SQL Injection vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Cost Estimation \u0026 Payment Forms Builder.This issue affects WP Cost Estimation \u0026 Payment Forms Builder: from n/a through 10.1.75.","status":"published","published":"2024-03-31T18:18:31.097Z","modified":"2026-04-28T16:09:24.903Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:07.482552Z"}],"euvd":[{"id":"EUVD-2024-28409","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Cost Estimation \u0026 Payment Forms Builder.This issue affects WP Cost Estimation \u0026 Payment Forms Builder: from n/a through 10.1.75.","status":"published","published":"2024-03-31T18:18:31Z","modified":"2026-04-28T16:09:24Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:06:07.488562Z"}],"ghsa":[{"id":"GHSA-mggj-4hpc-24pc","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Cost Estimation \u0026 Payment Forms Builder.This issue affects WP Cost Estimation \u0026 Payment Forms Builder: from n/a through 10.1.75.","status":"published","published":"2024-03-31T21:30:35Z","modified":"2026-04-28T21:34:28Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:07:44.696169Z"}],"nvd":[{"id":"CVE-2024-30489","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Cost Estimation \u0026 Payment Forms Builder.This issue affects WP Cost Estimation \u0026 Payment Forms Builder: from n/a through 10.1.75.","status":"published","published":"2024-03-31T19:15:46.03Z","modified":"2026-06-17T07:27:03.607Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:09:44.124823Z"}]}}