Login Request a demo
CF
Product
Calculated Fields Form
by codepeople · last CVE Sep 23, 2026
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 0High 2Medium 14Low 1
Severity
All severities17Critical0High2Medium14Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Calculated Fields Form to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25368
6.5
0%
Feb 19
WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability
Affected: through 5.4.4.1
CVE-2026-3986
6.4
0%
Mar 13
Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings
Affected: through 5.4.5.0
CVE-2024-29759
6.1
0%
Mar 27
WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 1.2.54
CVE-2024-2020
6.1
1%
Mar 13
Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
Affected: through 5.1.56
CVE-2024-0963
5.4
0%
Feb 2
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: through 1.2.52
CVE-2023-51517
5.4
0%
Dec 29
WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection
Affected: through 1.2.28
CVE-2020-7228
5.4
1%
Jan 22
The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms
Affected: through 1.0.353
CVE-2024-12601
5.3
1%
Dec 17
Calculated Fields Form <= 5.2.63 - Denial of Service
Affected: through 5.2.63
CVE-2024-13382
4.8
0%
May 15
Calculated Fields Form < 5.2.64 - Admin+ Stored XSS
Affected: through 5.2.64
CVE-2024-13381
4.8
0%
May 1
Calculated Fields Form < 5.2.62 - Admin+ Stored XSS
Affected: before 5.2.62
CVE-2023-0389
4.8
0%
Jan 16
Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields
Affected: before 1.1.151
CVE-2023-6446
4.8
0%
Jan 11
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
Affected: through 1.2.40
CVE-2024-9940
4.3
0%
Oct 17
Calculated Fields Form <= 5.2.45 - HTML Injection
Affected: through 5.2.45
CVE-2023-26523
4.3
0%
Jun 3
WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability
Affected: through 1.1.120
Showing 14