Codepeople Calculated Fields Form vulnerabilities

• codepeople calculated fields form – ai form builder for wordpress – contact, payment, quote, quiz & more Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation CVE-2026-103909 6.1 MediumOctober 3, 2026
• codepeople calculated fields form – ai form builder for wordpress – contact, payment, quote, quiz & more Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value CVE-2026-100184 4.7 MediumOctober 1, 2026
• codepeople calculated fields form – ai form builder for wordpress – contact, payment, quote, quiz & more Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices() CVE-2026-100179 6.1 MediumOctober 1, 2026
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-95529 7.1 HighSeptember 23, 2026
• codepeople calculated fields form Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings CVE-2026-3986 6.4 MediumMarch 13, 2026
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability CVE-2026-25368 6.5 MediumFebruary 19, 2026
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-49291 4.3 MediumJune 6, 2025
• codepeople calculated fields form Calculated Fields Form < 5.2.64 - Admin+ Stored XSS CVE-2024-13382 4.8 MediumMay 15, 2025
• codepeople calculated fields form Calculated Fields Form < 5.2.62 - Admin+ Stored XSS CVE-2024-13381 4.8 MediumMay 1, 2025
• codepeople calculated fields form Calculated Fields Form < 5.2.62 - Admin+ Stored XSS CVE-2024-12273 3.5 LowApril 29, 2025
• codepeople calculated fields form Calculated Fields Form <= 5.2.63 - Denial of Service CVE-2024-12601 5.3 MediumDecember 17, 2024
• codepeople calculated fields form Calculated Fields Form <= 5.2.45 - HTML Injection CVE-2024-9940 5.3 MediumOctober 17, 2024
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability CVE-2023-26523 4.3 MediumJune 3, 2024
• codepeople calculated fields form WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-29759 7.1 HighMarch 27, 2024
• codepeople calculated fields form Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting CVE-2024-2020 7.2 HighMarch 13, 2024
• codepeople calculated fields form Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-0963 6.4 MediumFebruary 2, 2024
• codepeople calculated fields form Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields CVE-2023-0389 4.8 MediumJanuary 16, 2024
• codepeople calculated fields form Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-6446 4.4 MediumJanuary 11, 2024
• codepeople calculated fields form WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection CVE-2023-51517 4.1 MediumDecember 29, 2023