Calculated Fields Form (Codepeople) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 277 known versions, newest CVE from 2026-09-23. Vendor: Codepeople.
CVEs of Calculated Fields Form
- CVE-2026-95529 - CVSS 7.1 (high), 2026-09-23: Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions.
- CVE-2026-3986 - CVSS 6.4 (medium), 2026-03-13: The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including,…
- CVE-2026-25368 - CVSS 6.5 (medium), 2026-02-19: Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control…
- CVE-2025-49291 - CVSS 8.8 (high), 2025-06-06: Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue…
- CVE-2024-13382 - CVSS 4.8 (medium), 2025-05-15: The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow high privilege users such as…
- CVE-2024-13381 - CVSS 4.8 (medium), 2025-05-01: The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as…
- CVE-2024-12273 - CVSS 3.5 (low), 2025-04-29: The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as…
- CVE-2024-12601 - CVSS 5.3 (medium), 2024-12-17: The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited…
- CVE-2024-9940 - CVSS 5.3 (medium), 2024-10-17: The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45. This is due to the plugin not…
- CVE-2023-26523 - CVSS 4.3 (medium), 2024-06-03: Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a…
- CVE-2024-29759 - CVSS 7.1 (high), 2024-03-27: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Calculated Fields Form allows Reflected…
- CVE-2024-2020 - CVSS 7.2 (high), 2024-03-13: The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page href parameter in all versions up to, and…
- CVE-2024-0963 - CVSS 6.4 (medium), 2024-02-02: The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions…
- CVE-2023-0389 - CVSS 4.8 (medium), 2024-01-16: The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such…
- CVE-2023-6446 - CVSS 4.8 (medium), 2024-01-11: The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40…
- CVE-2023-51517 - CVSS 5.4 (medium), 2023-12-29: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a…
- CVE-2020-7228 - CVSS 5.4 (medium), 2020-01-22: The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be…
