Codepeople vulnerabilities
93 CVEs and advisories name Codepeople as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-9940Calculated Fields Form <= 5.2.45 - HTML Injection
- CVE-2024-47297WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-35735WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability
- CVE-2024-33543WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability
- CVE-2024-35734WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-36082SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an adm
- CVE-2023-48318WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability
- CVE-2023-28494WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability
- CVE-2023-28492WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability
- CVE-2023-26523WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability
- CVE-2023-26521WordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability
- CVE-2024-32720WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability
- CVE-2024-24873WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability
- CVE-2024-24874WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability
- CVE-2024-31941WordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-31302WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability
- CVE-2024-29759WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-25039WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability
- CVE-2024-2020Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
- CVE-2024-0963Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2022-41790WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control
- CVE-2023-6446Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2023-51517WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection
- CVE-2023-41732WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-36384WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23971WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)
- CVE-2014-125091codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection
- CVE-2022-3427Corner Ad <= 1.0.56 - Cross-Site Request Forgery
- CVE-2022-4036Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass
- CVE-2022-4035Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form