Codepeople vulnerabilities

Products

• Calculated Fields Form 16
• Calculated Fields Form 13
• Wp Time Slots Booking Form 12
• Appointment Booking Calendar 11
• Contact Form Email 11
• Contact Form Email 10
• Appointment Booking Calendar 9
• Booking Calendar Contact Form 9
• Polls Cp 7
• Wp Time Slots Booking Form 7
• Appointment Hour Booking 6
• Cp Polls 6
• Appointment Hour Booking – Booking Calendar 5
• Cp Multi View Event Calendar 5
• Cp Contact Form With Paypal 4
• Cp Contact Form With Paypal 4
• Form Builder Cp 4
• Calculated Fields Form – Ai Form Builder For Wordpress – Contact, Payment, Quote, Quiz & More 3
• Cp Media Player 3
• Music Player For Woocommerce 3
• Booking Calendar Contact Form 2
• Cp Blocks 2
• Cp Image Store With Slideshow 2
• Cp Multi View Events Calendar 2
• Form Builder Cp 2
• Google Maps Cp 2
• Music Store 2
• Music Store 2
• Search In Place 2
• Sell Downloads 2

Newest

• codepeople cp multi view events calendar CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parameter CVE-2026-119176 6.4 MediumOctober 30, 2026
• codepeople appointment booking calendar Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter CVE-2026-111727 6.4 MediumOctober 28, 2026
• codepeople music store – wordpress ecommerce Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter CVE-2026-115497 7.5 HighOctober 23, 2026
• codepeople contact form email WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability CVE-2026-112379 7.1 HighOctober 22, 2026
• codepeople cp multi view events calendar CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter CVE-2026-110701 7.2 HighOctober 16, 2026
• codepeople cp multi view event calendar WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability CVE-2026-109901 8.5 HighOctober 14, 2026
• codepeople sell downloads WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability CVE-2026-94590 6.5 MediumOctober 10, 2026
• codepeople search in place WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-95598 7.1 HighOctober 9, 2026
• codepeople cp media player CP Media Player < 1.3.4 - Contributor+ Media Player Settings Update CVE-2026-104678 2.7 LowOctober 7, 2026
• codepeople calculated fields form – ai form builder for wordpress – contact, payment, quote, quiz & more Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation CVE-2026-103909 6.1 MediumOctober 3, 2026
• codepeople calculated fields form – ai form builder for wordpress – contact, payment, quote, quiz & more Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value CVE-2026-100184 4.7 MediumOctober 1, 2026
• codepeople appointment hour booking – booking calendar Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer CVE-2026-96573 7.2 HighOctober 1, 2026
• codepeople calculated fields form – ai form builder for wordpress – contact, payment, quote, quiz & more Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices() CVE-2026-100179 6.1 MediumOctober 1, 2026
• codepeople music player for woocommerce WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability CVE-2026-93624 7.2 HighSeptember 30, 2026
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-95529 7.1 HighSeptember 23, 2026
• codepeople appointment hour booking Appointment Hour Booking < 1.5.95 - Unauthenticated Booking Capacity Bypass via Multi-Appointment Submission CVE-2026-86475 5.3 MediumSeptember 16, 2026
• codepeople music store Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler CVE-2026-82304 8.6 HighSeptember 5, 2026
• codepeople music player for woocommerce WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-78283 7.1 HighAugust 27, 2026
• codepeople cp media player WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-78281 7.1 HighAugust 27, 2026
• codepeople appointment hour booking WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability CVE-2026-66679 6.5 MediumAugust 18, 2026
• codepeople appointment hour booking Appointment Hour Booking < 1.5.88 - Unauthenticated Booking Price Manipulation via tcost Parameter CVE-2026-16282 5.3 MediumAugust 8, 2026
• codepeople appointment hour booking WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability CVE-2026-65514 6.5 MediumJuly 23, 2026
• codepeople google maps cp WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-57670 7.1 HighJuly 2, 2026
• codepeople appointment booking calendar Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure CVE-2026-12113 4.3 MediumJuly 1, 2026
• codepeople post map for google maps CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta CVE-2026-13335 6.4 MediumJune 27, 2026
• codepeople appointment booking calendar Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter CVE-2026-12111 4.3 MediumJune 18, 2026
• codepeople wp time slots booking form WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability CVE-2026-48882 8.5 HighJune 15, 2026
• codepeople wp time slots booking form WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability CVE-2026-40791 Public exploit 7.1 HighJune 15, 2026
• codepeople booking calendar contact form WordPress Booking Calendar Contact Form 1.0.23 SQL Injection CVE-2016-20068 8.8 HighJune 15, 2026
• codepeople appointment booking calendar WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS CVE-2016-20084 5.1 MediumJune 15, 2026
• codepeople booking calendar contact form WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS CVE-2016-20070 5.1 MediumJune 15, 2026
• codepeople booking calendar contact form WordPress Booking Calendar Contact Form 1.0.23 SQL Injection CVE-2016-20069 8.8 HighJune 15, 2026
• codepeople cp polls WordPress CP Polls 1.0.8 Cross-Site Request Forgery CVE-2016-20067 5.3 MediumJune 15, 2026
• codepeople cp polls WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting CVE-2016-20066 5.1 MediumJune 15, 2026
• codepeople form builder cp Form Builder CP < 1.2.47 - Editor+ Stored XSS via form_structure CVE-2026-9278 5.4 MediumJune 15, 2026
• codepeople booking calendar contact form Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover CVE-2026-6810 5.3 MediumApril 24, 2026
• codepeople contact form email WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability CVE-2026-32483 6.5 MediumMarch 25, 2026
• codepeople cp multi view event calendar WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability CVE-2026-25465 6.5 MediumMarch 25, 2026
• codepeople cp contact form with paypal WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability CVE-2026-32433 8.5 HighMarch 13, 2026
• codepeople wp time slots booking form WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability CVE-2026-32432 5.3 MediumMarch 13, 2026
• codepeople calculated fields form Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings CVE-2026-3986 6.4 MediumMarch 13, 2026
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability CVE-2026-25368 6.5 MediumFebruary 19, 2026
• codepeople appointment hour booking – booking calendar Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration CVE-2026-1083 4.4 MediumJanuary 28, 2026
• codepeople cp image store with slideshow CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import CVE-2026-0684 4.3 MediumJanuary 13, 2026
• codepeople sell downloads WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability CVE-2025-68850 7.5 HighJanuary 5, 2026
• codepeople wp time slots booking form WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability CVE-2025-68569 6.5 MediumDecember 24, 2025
• codepeople contact form email WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-10019 6.5 MediumDecember 18, 2025
• codepeople booking calendar contact form Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter CVE-2025-13318 5.3 MediumNovember 22, 2025
• codepeople cp contact form with paypal CP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation CVE-2025-13384 7.5 HighNovember 22, 2025
• codepeople appointment booking calendar Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter CVE-2025-13317 5.3 MediumNovember 22, 2025
• Show olderLoading…