CF
Product
Calculated Fields Form
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 12Low 1
Watch
Add Calculated Fields Form to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49291 | 8.8 | Jun 6 | Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields… Affected: before 5.3.59 |
| CVE-2026-95529 | 7.1 | Sep 23 | WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.5.1.1 |
| CVE-2026-3986 | 6.4 | Mar 13 | Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings Affected: through 5.4.5.0 |
| CVE-2024-29759 | 6.1 | Mar 27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects… Affected: before 1.2.55 |
| CVE-2024-2020 | 6.1 | Mar 13 | The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page href parameter in all versions up to, and including, 5.1.56 due to… Affected: before 5.1.57 |
| CVE-2024-0963 | 5.4 | Feb 2 | The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions up to, and including,… Affected: through 1.2.52 |
| CVE-2023-51517 | 5.4 | Dec 29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28 Affected: through 1.2.28 |
| CVE-2020-7228 | 5.4 | Jan 22 | The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms Affected: through 1.0.353 |
| CVE-2024-12601 | 5.3 | Dec 17 | The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63 Affected: before 5.2.64 |
| CVE-2024-13382 | 4.8 | May 15 | The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: through 5.2.64 |
| CVE-2024-13381 | 4.8 | May 1 | The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 5.2.62 |
| CVE-2023-0389 | 4.8 | Jan 16 | The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform… Affected: before 1.1.151 |
| CVE-2024-9940 | 4.3 | Oct 17 | The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45 Affected: before 5.2.46 |
| CVE-2023-26523 | 4.3 | Jun 3 | Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120 Affected: before 1.1.121 |
| CVE-2024-12273 | 3.5 | Apr 29 | The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… Affected: before 5.2.62 |
Showing 15