CVE-2025-49291
Published Jun 6, 2025Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields…
Vendor/product archive
codepeople / calculated_fields_form CVEs
Beta · best-effort13 CVEs tagged to codepeople / calculated_fields_form — 0 Critical, 2 High, 10 Medium, 1 Low, 0 Unrated.
CVE-2024-13382
Published May 15, 2025The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-13381
Published May 1, 2025The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-12273
Published Apr 29, 2025The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-12601
Published Dec 17, 2024The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width paramete…
CVE-2024-9940
Published Oct 17, 2024The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45. This is due to the plugin not properly neutralizing H…
CVE-2023-26523
Published Jun 3, 2024Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2024-29759
Published Mar 27, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects Cal…
CVE-2024-2020
Published Mar 13, 2024The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page href parameter in all versions up to, and including, 5.1.56 due to i…
CVE-2024-0963
Published Feb 2, 2024The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions up to, and including,…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-0389
Published Jan 16, 2024The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-51517
Published Dec 29, 2023URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2020-7228
Published Jan 22, 2020The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authentic…
Showing 1-13 of 13 CVEsPage 1 of 1