Skip to contentCodepeople vulnerabilities
Newest
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerabilityCVE-2025-643696.5 Medium
- codepeople appointment booking calendarWordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerabilityCVE-2025-642615.4 Medium
- codepeople cp multi view event calendarWordPress CP Multi View Event Calendar plugin <= 1.4.35 - Broken Access Control vulnerabilityCVE-2025-580093.8 Low
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482316.5 Medium
- codepeople cp pollsWordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-500255.9 Medium
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-493324.3 Medium
- codepeople calculated fields formWordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-492914.3 Medium
- codepeople polls cpPolls CP <= 1.0.75 - Admin+ Stored XSS via Custom StylesCVE-2024-88545.4 Medium
- codepeople polls cpPolls CP <= 1.0.75 - Admin+ Stored Cross-Site ScriptingCVE-2024-88515.4 Medium
- codepeople calculated fields formCalculated Fields Form < 5.2.64 - Admin+ Stored XSSCVE-2024-133824.8 Medium
- codepeople music player for woocommerceWordPress Music Player for WooCommerce plugin <= 1.5.1 - Broken Access Control VulnerabilityCVE-2025-474725.4 Medium
- codepeople calculated fields formCalculated Fields Form < 5.2.62 - Admin+ Stored XSSCVE-2024-133814.8 Medium
- codepeople calculated fields formCalculated Fields Form < 5.2.62 - Admin+ Stored XSSCVE-2024-122733.5 Low
- codepeople appointment booking calendarWordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control VulnerabilityCVE-2025-462475.3 Medium
- codepeople appointment booking calendarWordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerabilityCVE-2025-462418.2 High
- codepeople payment form for paypal proWordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-395625.9 Medium
- codepeople cp contact form with paypal, dwbooster cp contact form +1 moreCP Contact Form with PayPal <= 1.3.52 - Cross-Site Request ForgeryCVE-2024-137586.5 Medium
- codepeople music storeWordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-246267.1 High
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-247235.9 Medium
- codepeople contact form emailWordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-247275.9 Medium
- codepeople form builder cpWordPress Form Builder CP Plugin <= 1.2.41 - SQL Injection vulnerabilityCVE-2025-246728.5 High
- codepeople form builder cpForm Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL InjectionCVE-2024-136806.5 Medium
- codepeople appointment booking calendar, unknown appointment booking calendar plugin and scheduling plugin +1 moreBookingPress < 1.1.23 - Unauthenticated Export File DownloadCVE-2024-122747.5 High
- codepeople appointment hour bookingWordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerabilityCVE-2023-456495.3 Medium
- codepeople calculated fields formCalculated Fields Form <= 5.2.63 - Denial of ServiceCVE-2024-126015.3 Medium
- codepeople cp multi view event calendarWordPress Calendar Event Multi View plugin <= 1.4.13 - Broken Access Control vulnerabilityCVE-2023-23814Fix available3.8 Low
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerabilityCVE-2023-238954.7 Medium
- codepeople booking calendar contact formWordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerabilityCVE-2023-250374.3 Medium
- codepeople calculated fields formCalculated Fields Form <= 5.2.45 - HTML InjectionCVE-2024-99405.3 Medium
- codepeople cp pollsWordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-472977.1 High
- codepeople smart image gallerySmart Image Gallery < 1.0.19 - Update/Delete Google API Key via CSRFCVE-2024-36326.8 Medium
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerabilityCVE-2024-357355.3 Medium
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerabilityCVE-2024-335437.5 High
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-357347.1 High
- codepeople music store - wordpress ecommerce, music store +1 moreSQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows...CVE-2024-360826.5 Medium
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerabilityCVE-2023-483185.3 Medium
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission VulnerabilityCVE-2023-284944.3 Medium
- codepeople cp multi view event calendarWordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerabilityCVE-2023-28492Fix available4.3 Medium
- codepeople cp contact form with paypalWordPress CP Contact Form with PayPal plugin <= 1.3.34 - Missing Authorization Leading To Feedback Submission vulnerabilityCVE-2023-274604.3 Medium
- codepeople calculated fields formWordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission VulnerabilityCVE-2023-265234.3 Medium
- codepeople search in placeWordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerabilityCVE-2023-265214.3 Medium
- codepeople appointment hour bookingWordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerabilityCVE-2024-327205.3 Medium
- codepeople cp polls, polls cp +1 moreWordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerabilityCVE-2024-248735.3 Medium
- codepeople cp polls, polls cp +1 moreWordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerabilityCVE-2024-248745.3 Medium
- codepeople cp media playerWordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-319415.4 Medium
- codepeople contact form emailWordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerabilityCVE-2024-313025.3 Medium
- codepeople calculated fields formWordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-297597.1 High
- codepeople google maps cpWordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission VulnerabilityCVE-2023-250394.3 Medium
- codepeople appointment booking calendarBooking Calendar < 1.3.83 - CSRF appointment schedulingCVE-2024-08568.8 High
- codepeople calculated fields formCalculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-20207.2 High
- Show moreLoading…