Login Request a demo
CO
Vendor
codepeople
25 products with CVEs on record
88
CVEs
0
On KEV
11
New 30D
Products
AB
Appointment Booking Calendar
codepeople
9.8
14 CVEs0 on KEV1 new
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
6.1
3 CVEs0 on KEV3 new
CF
Contact Form Email
codepeople
8.8
12 CVEs0 on KEV1 new
CM
CP Multi View Event Calendar
codepeople
8.5
2 CVEs0 on KEV1 new
MP
Music Player for WooCommerce
codepeople
7.2
2 CVEs0 on KEV1 new
AH
Appointment Hour Booking – Booking Calendar
codepeople
7.2
1 CVEs0 on KEV1 new
CM
CP Multi View Events Calendar
codepeople
7.2
1 CVEs0 on KEV1 new
MS
Music Store – WordPress eCommerce
codepeople
7.5
1 CVEs0 on KEV1 new
SI
Search in Place
codepeople
7.1
1 CVEs0 on KEV1 new
CF
Calculated Fields Form
codepeople
8.8
14 CVEs0 on KEV0 new
WT
WP Time Slots Booking Form
codepeople
9.8
9 CVEs0 on KEV0 new
PC
Polls CP
Codepeople
9.8
5 CVEs0 on KEV0 new
CC
CP Contact Form With Paypal
Codepeople
8.8
4 CVEs0 on KEV0 new
AH
Appointment Hour Booking
codepeople
6.5
3 CVEs0 on KEV0 new
BC
Booking Calendar Contact Form
codepeople
9.8
3 CVEs0 on KEV0 new
FB
Form Builder CP
Codepeople
6.5
2 CVEs0 on KEV0 new
GM
Google Maps CP
Codepeople
8.8
2 CVEs0 on KEV0 new
MS
Music Store
Codepeople
6.5
2 CVEs0 on KEV0 new
CP
CodePeople Post Map for Google Maps
codepeople
6.4
1 CVEs0 on KEV0 new
CM
Com Multicalendar
Codepeople
–
1 CVEs0 on KEV0 new
CA
CP Appointment Calendar
Codepeople
9.8
1 CVEs0 on KEV0 new
CM
CP Media Player
codepeople
7.1
1 CVEs0 on KEV0 new
PF
Payment Form For Paypal Pro
Codepeople
6.1
1 CVEs0 on KEV0 new
SD
Sell Downloads
Codepeople
7.5
1 CVEs0 on KEV0 new
SI
Smart Image Gallery
Codepeople
6.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111727
New
AB
Appointment Booking Calendar
codepeople
6.4–Oct 28Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter
CVE-2026-115497
New
MS
Music Store – WordPress eCommerce
codepeople
7.5
1%
Oct 23Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter
CVE-2026-112379
New
CF
Contact Form Email
Codepeople
7.1
0%
Oct 22WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110701
CM
CP Multi View Events Calendar
codepeople
7.2
0%
Oct 16CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter
CVE-2026-109901
CM
CP Multi View Event Calendar
Codepeople
8.5
0%
Oct 14WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
CVE-2026-95598
SI
Search in Place
codepeople
7.1
0%
Oct 9WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-103909
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
6.1
0%
Oct 3Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation
CVE-2026-100184
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
4.7
0%
Oct 1Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value
CVE-2026-96573
AH
Appointment Hour Booking – Booking Calendar
codepeople
7.2
0%
Oct 1Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
CVE-2026-100179
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
6.1
0%
Oct 1Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()
CVE-2026-93624
MP
Music Player for WooCommerce
codepeople
7.2
0%
Sep 30WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability
CVE-2026-95529
CF
Calculated Fields Form
codepeople
7.1
0%
Sep 23WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78283
MP
Music Player for WooCommerce
codepeople
7.1
0%
Aug 27WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78281
CM
CP Media Player
codepeople
7.1
0%
Aug 27WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66679
AH
Appointment Hour Booking
codepeople
6.5
0%
Aug 18WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability
CVE-2026-65514
AH
Appointment Hour Booking
codepeople
6.5
0%
Jul 23WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57670
GM
Google Maps CP
Codepeople
7.1
0%
Jul 2WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-12113
AB
Appointment Booking Calendar
codepeople
4.3
0%
Jul 1Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
CVE-2026-13335
CP
CodePeople Post Map for Google Maps
codepeople
6.4
0%
Jun 27CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta
CVE-2026-12111
AB
Appointment Booking Calendar
codepeople
4.3
0%
Jun 18Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter
CVE-2026-48882
WT
WP Time Slots Booking Form
codepeople
8.5
0%
Jun 15WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability
CVE-2026-40791
WT
WP Time Slots Booking Form
codepeople
7.1
0%
Jun 15WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-6810
BC
Booking Calendar Contact Form
codepeople
5.3
0%
Apr 24Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover
CVE-2026-32483
CF
Contact Form Email
codepeople
6.5
0%
Mar 25WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability
CVE-2026-25465
CM
CP Multi View Event Calendar
codepeople
6.5
0%
Mar 25WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49291
CF
Calculated Fields Form
Codepeople
8.8
0%
Jun 6Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields…
CVE-2024-8854
PC
Polls CP
Codepeople
5.4
0%
May 15The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-8851
PC
Polls CP
Codepeople
5.4
0%
May 15The Polls CP WordPress plugin before 1.0.77 does not sanitise and escape some of its poll settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-13382
CF
Calculated Fields Form
Codepeople
4.8
0%
May 15The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-13381
CF
Calculated Fields Form
Codepeople
4.8
0%
May 1The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2024-12273
CF
Calculated Fields Form
Codepeople
3.5
0%
Apr 29The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2025-46247
AB
Appointment Booking Calendar
Codepeople
9.8
0%
Apr 22Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Accessing Functionality Not Properly Constrained by ACLs.This…
CVE-2025-46241
AB
Appointment Booking Calendar
Codepeople
8.8
0%
Apr 22Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment Booking…
CVE-2025-24727
CF
Contact Form Email
Codepeople
4.8
0%
Jan 24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Contact Form Email contact-form-to-email allows Stored XSS.This…
CVE-2024-13680
FB
Form Builder CP
Codepeople
6.5
0%
Jan 24The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'CP_EASY_FORM_WILL_APPEAR_HERE' shortcode in all versions up to, and…
CVE-2024-12274
AB
Appointment Booking Calendar
Codepeople
7.5
1%
Jan 13The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily…
CVE-2023-45649
AH
Appointment Hour Booking
codepeople
5.3
0%
Jan 2WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability
CVE-2024-12601
CF
Calculated Fields Form
Codepeople
5.3
1%
Dec 17The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63
CVE-2023-23895
WT
WP Time Slots Booking Form
Codepeople
7.2
1%
Dec 9Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Time…
CVE-2024-9940
CF
Calculated Fields Form
Codepeople
4.3
0%
Oct 17The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45
CVE-2024-3632
SI
Smart Image Gallery
Codepeople
6.8
0%
Jul 13The Smart Image Gallery WordPress plugin before 1.0.19 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change…
CVE-2024-35735
WT
WP Time Slots Booking Form
Codepeople
9.8
0%
Jun 10Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11
CVE-2024-33543
WT
WP Time Slots Booking Form
Codepeople
7.5
0%
Jun 9Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.06
CVE-2024-35734
WT
WP Time Slots Booking Form
Codepeople
6.1
0%
Jun 8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CodePeople WP Time Slots Booking Form allows Stored XSS.This issue…
CVE-2024-36082
MS
Music Store
Codepeople
6.5
1%
Jun 7SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute…
CVE-2023-48318
CF
Contact Form Email
Codepeople
6.5
0%
Jun 4Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact Form Email: from…
CVE-2023-28494
CF
Contact Form Email
Codepeople
4.3
0%
Jun 4Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31
CVE-2023-27460
CC
CP Contact Form With Paypal
Codepeople
8.8
0%
Jun 3Missing Authorization vulnerability in CodePeople, paypaldev CP Contact Form with Paypal allows Functionality Misuse.This issue affects CP Contact Form with Paypal: from n/a…
CVE-2023-26523
CF
Calculated Fields Form
Codepeople
4.3
0%
Jun 3Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120
CVE-2024-31302
CF
Contact Form Email
Codepeople
5.3
0%
Apr 10Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44
CVE-2024-29759
CF
Calculated Fields Form
Codepeople
6.1
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects…
CVE-2023-25039
GM
Google Maps CP
Codepeople
8.8
0%
Mar 25Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43
CVE-2024-0856
AB
Appointment Booking Calendar
Codepeople
8.8
0%
Mar 20The Appointment Booking Calendar WordPress plugin before 1.3.83 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted…
CVE-2024-2020
CF
Calculated Fields Form
Codepeople
6.1
1%
Mar 13The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page href parameter in all versions up to, and including, 5.1.56 due to…
CVE-2024-0963
CF
Calculated Fields Form
Codepeople
5.4
0%
Feb 2The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions up to, and including,…
CVE-2022-41790
WT
WP Time Slots Booking Form
Codepeople
8.8
0%
Jan 17Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76
CVE-2023-0389
CF
Calculated Fields Form
Codepeople
4.8
0%
Jan 16The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform…
CVE-2023-51517
CF
Calculated Fields Form
Codepeople
5.4
0%
Dec 29URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28
CVE-2023-5955
CF
Contact Form Email
Codepeople
4.8
0%
Dec 11The Contact Form Email WordPress plugin before 1.3.44 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2023-2718
CF
Contact Form Email
Codepeople
5.4
1%
Jun 12The Contact Form Email WordPress plugin before 1.3.38 does not escape submitted values before displaying them in the HTML, leading to a Stored XSS vulnerability