Skip to content

Codepeople vulnerabilities

Newest

codepeople calculated fields formCalculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-09636.4 MediumFebruary 2, 2024
codepeople wp time slots booking formWordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access ControlCVE-2022-417904.3 MediumJanuary 17, 2024
codepeople calculated fields formCalculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown FieldsCVE-2023-03894.8 MediumJanuary 16, 2024
codepeople calculated fields formCalculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-64464.4 MediumJanuary 11, 2024
codepeople calculated fields formWordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open RedirectionCVE-2023-515174.1 MediumDecember 29, 2023
codepeople contact form emailContact Form Email < 1.3.44 - Editor+ Stored Cross-Site ScriptingCVE-2023-59554.8 MediumDecember 11, 2023
codepeople cp blocksWordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-417325.4 MediumOctober 6, 2023
booking calendar project calendar, codepeople booking calendar contact form +1 moreWordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)CVE-2023-363847.1 HighJuly 18, 2023
codepeople contact form emailContact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site ScriptingCVE-2023-27185.4 MediumJune 12, 2023
codepeople cp appointment calendarCP Appointment Calendar Plugin dex_appointments.php dex_process_ready_to_go_appointment sql injectionCVE-2015-100996.3 MediumApril 10, 2023
codepeople wp time slots booking formWordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239715.9 MediumApril 6, 2023
codepeople cp-polls plugin, polls cp +1 morecodepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injectionCVE-2014-1250914.7 MediumMarch 4, 2023
codepeople corner adCorner Ad <= 1.0.56 - Cross-Site Request ForgeryCVE-2022-34278.8 HighDecember 15, 2022
dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 moreAppointment Hour Booking <= 1.3.72 - CAPTCHA BypassCVE-2022-40365.3 MediumNovember 29, 2022
dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 moreAppointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment FormCVE-2022-40357.2 HighNovember 29, 2022
dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 moreAppointment Hour Booking <= 1.3.72 - CSV InjectionCVE-2022-40345.8 MediumNovember 29, 2022
codepeople appointment booking calendar, appointment booking calendar (wordpress plugin) +1 moreWordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerabilityCVE-2022-434824.3 MediumNovember 18, 2022
dwbooster appointment hour booking, codepeople appointment hour booking (wordpress plugin) +1 moreWordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerabilityCVE-2022-416924.3 MediumNovember 18, 2022
codepeople form builder cpForm Builder CP < 1.2.32 - Admin+ Stored Cross-Site ScriptingCVE-2022-25674.8 MediumSeptember 19, 2022
codepeople cp image store with slideshowCP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLiCVE-2022-1692EPSS 10.4%9.8 CriticalJune 6, 2022
codepeople cp blocksCP Blocks < 1.0.15 - Admin+ Stored Cross-Site ScriptingCVE-2022-0448Public exploit4.8 MediumMarch 7, 2022
codepeople wp time slots booking formWP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site ScriptingCVE-2022-03894.8 MediumMarch 7, 2022
codepeople contact form email, contact form email form email +1 moreContact Form Email <= 1.3.24 Authenticated Stored Cross-Site ScriptingCVE-2021-423614.8 MediumNovember 17, 2021
codepeople appointment booking calendarThe Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields...CVE-2020-9372Public exploit7.8 HighMarch 4, 2020
codepeople appointment booking calendarStored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the...CVE-2020-9371Public exploit4.8 MediumMarch 4, 2020
codepeople calculated fields formThe Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS...CVE-2020-72285.4 MediumJanuary 22, 2020
codepeople music storeThe music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music...CVE-2016-109926.1 MediumSeptember 17, 2019
codepeople sell downloadsThe sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force...CVE-2015-93487.5 HighAugust 27, 2019
codepeople polls cpThe cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list.CVE-2014-103956.1 MediumAugust 27, 2019
codepeople polls cpThe cp-polls plugin before 1.0.5 for WordPress has XSS.CVE-2015-93466.1 MediumAugust 27, 2019
codepeople appointment booking calendarThe appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a...CVE-2016-109169.8 CriticalAugust 22, 2019
codepeople booking calendar contact formThe booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.CVE-2016-109099.8 CriticalAugust 21, 2019
codepeople booking calendar contact formThe booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.CVE-2016-109086.1 MediumAugust 21, 2019
codepeople cp contact form with paypalThe "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition.CVE-2019-147846.1 MediumAugust 15, 2019
codepeople contact form emailThe contact-form-to-email plugin before 1.2.66 for WordPress has XSS.CVE-2018-209636.1 MediumAugust 13, 2019
codepeople contact form emailThe contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.CVE-2018-209648.8 HighAugust 13, 2019
codepeople appointment booking calendarThe Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin...CVE-2019-147916.1 MediumAugust 9, 2019
codepeople cp contact form with paypalThe "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing...CVE-2019-147855.4 MediumAugust 9, 2019
codepeople contact form emailThe Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS,...CVE-2019-96466.1 MediumMarch 10, 2019
codepeople payment form for paypal proMultiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2)...CVE-2015-76666.1 MediumDecember 27, 2017
codepeople cp contact form with paypalThe cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for...CVE-2015-92338.8 HighSeptember 29, 2017
codepeople appointment booking calendarMultiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list...CVE-2015-73204.3 MediumSeptember 29, 2015
codepeople appointment booking calendarSQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the...CVE-2015-73197.5 HighSeptember 29, 2015
codepeople com multicalendarMultiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi...CVE-2013-59534.3 MediumMarch 19, 2014