Advisories · Technology

codepeople Calculated Fields Form.

Every CVE that names codepeople Calculated Fields Form among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-95529 CVE record

CVSS 7.1 High

WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
- codepeople Calculated Fields Form
- Cross-site scripting (XSS)
Not analysed yet 23 Sept 2026
CVE-2026-3986 CVE record

CVSS 6.4 Medium

Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings
- codepeople Calculated Fields Form
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2026
CVE-2026-25368 CVE record

CVSS 6.5 Medium

WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability
- codepeople Calculated Fields Form
- Broken access control
Not analysed yet 19 Feb 2026
CVE-2025-49291 CVE record

CVSS 4.3 Medium

WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability
- codepeople Calculated Fields Form
- Cross-site request forgery (CSRF)
Not analysed yet 6 Jun 2025
CVE-2024-12601 CVE record

CVSS 5.3 Medium

Calculated Fields Form <= 5.2.63 - Denial of Service
- codepeople Calculated Fields Form
- Denial of service
Not analysed yet 17 Dec 2024
CVE-2024-9940 CVE record

CVSS 5.3 Medium

Calculated Fields Form <= 5.2.45 - HTML Injection
- codepeople Calculated Fields Form
- CWE-75
Not analysed yet 17 Oct 2024
CVE-2023-26523 CVE record

CVSS 4.3 Medium

WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability
- CodePeople Calculated Fields Form
- Broken access control
Not analysed yet 3 Jun 2024
CVE-2024-29759 CVE record

CVSS 7.1 High

WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability
- CodePeople Calculated Fields Form
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2024-2020 CVE record

CVSS 7.2 High

Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
- codepeople Calculated Fields Form
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2024-0963 CVE record

CVSS 6.4 Medium

Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
- codepeople Calculated Fields Form
- Cross-site scripting (XSS)
Not analysed yet 2 Feb 2024
CVE-2023-6446 CVE record

CVSS 4.4 Medium

Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
- codepeople Calculated Fields Form
- Cross-site scripting (XSS)
Not analysed yet 11 Jan 2024
CVE-2023-51517 CVE record

CVSS 4.1 Medium

WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection
- CodePeople Calculated Fields Form
- Open redirect
Not analysed yet 29 Dec 2023