Login Request a demo
CO
Vendor
codepeople
28 products with CVEs on record
127
CVEs
0
On KEV
11
New 30D
Products
AB
Appointment Booking Calendar
codepeople
9.8
16 CVEs0 on KEV1 new
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
6.1
3 CVEs0 on KEV3 new
CF
Contact Form Email
codepeople
8.8
14 CVEs0 on KEV1 new
CM
CP Multi View Event Calendar
codepeople
8.5
5 CVEs0 on KEV1 new
MP
Music Player for WooCommerce
codepeople
7.2
3 CVEs0 on KEV1 new
AH
Appointment Hour Booking – Booking Calendar
codepeople
7.2
2 CVEs0 on KEV1 new
MS
Music Store – WordPress eCommerce
codepeople
7.5
2 CVEs0 on KEV1 new
SI
Search in Place
codepeople
7.1
2 CVEs0 on KEV1 new
CM
CP Multi View Events Calendar
codepeople
7.2
1 CVEs0 on KEV1 new
CF
Calculated Fields Form
codepeople
8.8
17 CVEs0 on KEV0 new
WT
WP Time Slots Booking Form
codepeople
9.8
12 CVEs0 on KEV0 new
BC
Booking Calendar Contact Form
codepeople
9.8
8 CVEs0 on KEV0 new
CC
CP Contact Form with Paypal
codepeople
8.8
7 CVEs0 on KEV0 new
PC
Polls CP
Codepeople
9.8
7 CVEs0 on KEV0 new
AH
Appointment Hour Booking
codepeople
6.5
4 CVEs0 on KEV0 new
CP
CP Polls
codepeople
7.1
4 CVEs0 on KEV0 new
FB
Form Builder CP
codepeople
8.5
3 CVEs0 on KEV0 new
MS
Music Store
codepeople
7.1
3 CVEs0 on KEV0 new
CM
CP Media Player
codepeople
7.1
2 CVEs0 on KEV0 new
GM
Google Maps CP
Codepeople
8.8
2 CVEs0 on KEV0 new
PF
Payment Form for PayPal Pro
codepeople
6.1
2 CVEs0 on KEV0 new
SD
Sell Downloads
codepeople
7.5
2 CVEs0 on KEV0 new
CP
CodePeople Post Map for Google Maps
codepeople
6.4
1 CVEs0 on KEV0 new
CM
Com Multicalendar
Codepeople
–
1 CVEs0 on KEV0 new
CA
CP Appointment Calendar
Codepeople
9.8
1 CVEs0 on KEV0 new
CB
CP Blocks
CodePeople
8.8
1 CVEs0 on KEV0 new
CI
CP Image Store with Slideshow
codepeople
4.3
1 CVEs0 on KEV0 new
SI
Smart Image Gallery
Codepeople
6.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111727
New
AB
Appointment Booking Calendar
codepeople
6.4
0%
Oct 28Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter
CVE-2026-115497
New
MS
Music Store – WordPress eCommerce
codepeople
7.5
1%
Oct 23Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter
CVE-2026-112379
CF
Contact Form Email
Codepeople
7.1
0%
Oct 22WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110701
CM
CP Multi View Events Calendar
codepeople
7.2
0%
Oct 16CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter
CVE-2026-109901
CM
CP Multi View Event Calendar
Codepeople
8.5
0%
Oct 14WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
CVE-2026-95598
SI
Search in Place
codepeople
7.1
0%
Oct 9WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-103909
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
6.1
0%
Oct 3Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation
CVE-2026-100184
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
4.7
0%
Oct 1Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value
CVE-2026-96573
AH
Appointment Hour Booking – Booking Calendar
codepeople
7.2
0%
Oct 1Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
CVE-2026-100179
CF
Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
codepeople
6.1
0%
Oct 1Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()
CVE-2026-93624
MP
Music Player for WooCommerce
codepeople
7.2
0%
Sep 30WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability
CVE-2026-95529
CF
Calculated Fields Form
codepeople
7.1
0%
Sep 23WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78283
MP
Music Player for WooCommerce
codepeople
7.1
0%
Aug 27WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78281
CM
CP Media Player
codepeople
7.1
0%
Aug 27WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66679
AH
Appointment Hour Booking
codepeople
6.5
0%
Aug 18WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability
CVE-2026-65514
AH
Appointment Hour Booking
codepeople
6.5
0%
Jul 23WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57670
GM
Google Maps CP
Codepeople
7.1
0%
Jul 2WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-12113
AB
Appointment Booking Calendar
codepeople
4.3
0%
Jul 1Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure
CVE-2026-13335
CP
CodePeople Post Map for Google Maps
codepeople
6.4
0%
Jun 27CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta
CVE-2026-12111
AB
Appointment Booking Calendar
codepeople
4.3
0%
Jun 18Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter
CVE-2026-48882
WT
WP Time Slots Booking Form
codepeople
8.5
0%
Jun 15WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability
CVE-2026-40791
WT
WP Time Slots Booking Form
codepeople
7.1
0%
Jun 15WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability
CVE-2026-6810
BC
Booking Calendar Contact Form
codepeople
5.3
0%
Apr 24Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover
CVE-2026-32483
CF
Contact Form Email
codepeople
6.5
0%
Mar 25WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability
CVE-2026-25465
CM
CP Multi View Event Calendar
codepeople
6.5
0%
Mar 25WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability
CVE-2026-32433
CC
CP Contact Form with Paypal
codepeople
8.5
0%
Mar 13WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability
CVE-2026-32432
WT
WP Time Slots Booking Form
codepeople
5.3
0%
Mar 13WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability
CVE-2026-3986
CF
Calculated Fields Form
codepeople
6.4
0%
Mar 13Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings
CVE-2026-25368
CF
Calculated Fields Form
codepeople
6.5
0%
Feb 19WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability
CVE-2026-1083
AH
Appointment Hour Booking – Booking Calendar
codepeople
4.4
0%
Jan 28Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration
CVE-2026-0684
CI
CP Image Store with Slideshow
codepeople
4.3
0%
Jan 13CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import
CVE-2025-68850
SD
Sell Downloads
codepeople
7.5
0%
Jan 5WordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerability
CVE-2025-68569
WT
WP Time Slots Booking Form
codepeople
6.5
0%
Dec 24WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability
CVE-2025-10019
CF
Contact Form Email
codepeople
6.5
0%
Dec 18WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-13318
BC
Booking Calendar Contact Form
codepeople
5.3
0%
Nov 22Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter
CVE-2025-13384
CC
CP Contact Form with PayPal
codepeople
7.5
0%
Nov 22CP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation
CVE-2025-13317
AB
Appointment Booking Calendar
codepeople
5.3
0%
Nov 22Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter
CVE-2025-64369
CF
Contact Form Email
codepeople
6.5
0%
Nov 13WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability
CVE-2025-64261
AB
Appointment Booking Calendar
codepeople
5.4
0%
Nov 13WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability
CVE-2025-58009
CM
CP Multi View Event Calendar
codepeople
3.8
0%
Sep 22WordPress CP Multi View Event Calendar plugin <= 1.4.35 - Broken Access Control vulnerability
CVE-2025-48231
BC
Booking Calendar Contact Form
codepeople
6.5
0%
Jul 4WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50025
CP
CP Polls
codepeople
5.9
0%
Jun 20WordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerability
CVE-2025-49332
WT
WP Time Slots Booking Form
codepeople
4.3
0%
Jun 6WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49291
CF
Calculated Fields Form
codepeople
8.8
0%
Jun 6WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2024-8854
PC
Polls CP
Codepeople
5.4
0%
May 15Polls CP <= 1.0.75 - Admin+ Stored XSS via Custom Styles
CVE-2024-8851
PC
Polls CP
Codepeople
5.4
0%
May 15Polls CP <= 1.0.75 - Admin+ Stored Cross-Site Scripting
CVE-2024-13382
CF
Calculated Fields Form
Codepeople
4.8
0%
May 15Calculated Fields Form < 5.2.64 - Admin+ Stored XSS
CVE-2025-47472
MP
Music Player for WooCommerce
codepeople
5.4
0%
May 7WordPress Music Player for WooCommerce plugin <= 1.5.1 - Broken Access Control Vulnerability
CVE-2024-13381
CF
Calculated Fields Form
Codepeople
4.8
0%
May 1Calculated Fields Form < 5.2.62 - Admin+ Stored XSS
CVE-2024-12273
CF
Calculated Fields Form
Codepeople
3.5
0%
Apr 29Calculated Fields Form < 5.2.62 - Admin+ Stored XSS
CVE-2025-46247
AB
Appointment Booking Calendar
codepeople
9.8
0%
Apr 22WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability
CVE-2025-46241
AB
Appointment Booking Calendar
codepeople
8.8
0%
Apr 22WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability
CVE-2025-39562
PF
Payment Form for PayPal Pro
codepeople
5.9
0%
Apr 17WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability
CVE-2024-13758
CC
CP Contact Form with PayPal
codepeople
6.5
0%
Jan 30CP Contact Form with PayPal <= 1.3.52 - Cross-Site Request Forgery
CVE-2025-24626
MS
Music Store
codepeople
7.1
0%
Jan 27WordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24723
BC
Booking Calendar Contact Form
codepeople
5.9
0%
Jan 24WordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2025-24727
CF
Contact Form Email
codepeople
4.8
0%
Jan 24WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24672
FB
Form Builder CP
codepeople
8.5
0%
Jan 24WordPress Form Builder CP Plugin <= 1.2.41 - SQL Injection vulnerability
CVE-2024-13680
FB
Form Builder CP
codepeople
6.5
0%
Jan 24Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
CVE-2024-12274
AB
Appointment Booking Calendar
Codepeople
7.5
1%
Jan 13BookingPress < 1.1.23 - Unauthenticated Export File Download