Skip to content

Known vulnerabilities in codepeople Calculated Fields Form

Is your version affected?

CVE Summary Score Published
CVE-2026-95529 Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions 7.1 High Sep 23, 2026
CVE-2026-3986 The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in… 6.4 Medium Mar 13, 2026
CVE-2026-25368 Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting… 6.5 Medium Feb 19, 2026
CVE-2025-49291 Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross… 4.3 Medium Jun 6, 2025
CVE-2024-12601 The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including,… 5.3 Medium Dec 17, 2024
CVE-2024-9940 The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including,… 5.3 Medium Oct 17, 2024
CVE-2023-26523 Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue… 4.3 Medium Jun 3, 2024
CVE-2024-29759 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople… 7.1 High Mar 27, 2024
CVE-2024-2020 The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page href… 7.2 High Mar 13, 2024
CVE-2024-0963 The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's… 6.4 Medium Feb 2, 2024
CVE-2023-6446 The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all… 4.4 Medium Jan 11, 2024
CVE-2023-51517 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue… 4.1 Medium Dec 29, 2023

Other codepeople products