CVE-2026-14900 | Stylemixmes Cost Calculator Builder PRO Plugin up to 4.0.3 on WordPress Formula Evaluation js_to_php originalValue code injection

July 29, 2026 Yanac

A vulnerability classified as critical has been found in Stylemixmes Cost Calculator Builder PRO Plugin up to 4.0.3 on WordPress. Affected by this vulnerability is the function js_to_php of the component Formula Evaluation. The manipulation of the argument originalValue leads to code injection.

This vulnerability is documented as CVE-2026-14900. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More