Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

codepeople vulnerabilities

93 published CVEs name codepeople among the affected products.

Published CVEs
93
Last 12 months
40
Critical
0
Known exploited
0

Critical 0High 27Medium 64Low 2Not scored 0

CVEs per yearBy the year they were published

  1. 20226
  2. 20235
  3. 202426
  4. 202523
  5. 202633

Newest CVEs

  • CVE-2026-119176

    CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parameter

    codepeople · CP Multi View Events Calendar

    Medium6.4
  • CVE-2026-111727

    Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter

    codepeople · Appointment Booking Calendar

    Medium6.4
  • CVE-2026-115497

    Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

    codepeople · Music Store – WordPress eCommerce

    High7.5
  • CVE-2026-112379

    WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability

    Codepeople · Contact Form Email

    High7.1
  • CVE-2026-110701

    CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter

    codepeople · CP Multi View Events Calendar

    High7.2
  • CVE-2026-109901

    WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability

    Codepeople · CP Multi View Event Calendar

    High8.5
  • CVE-2026-95598

    WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

    codepeople · Search in Place

    High7.1
  • CVE-2026-103909

    Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation

    codepeople · Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

    Medium6.1
  • CVE-2026-100184

    Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value

    codepeople · Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

    Medium4.7
  • CVE-2026-96573

    Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer

    codepeople · Appointment Hour Booking – Booking Calendar

    High7.2