codepeople vulnerabilities
93 published CVEs name codepeople among the affected products.
- Published CVEs
- 93
- Last 12 months
- 40
- Critical
- 0
- Known exploited
- 0
Critical 0High 27Medium 64Low 2Not scored 0
CVEs per yearBy the year they were published
- 20226
- 20235
- 202426
- 202523
- 202633
Newest CVEs
- CVE-2026-119176
CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parameter
codepeople · CP Multi View Events Calendar
Medium6.4 - CVE-2026-111727
Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter
codepeople · Appointment Booking Calendar
Medium6.4 - CVE-2026-115497
Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter
codepeople · Music Store – WordPress eCommerce
High7.5 - CVE-2026-112379
WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability
Codepeople · Contact Form Email
High7.1 - CVE-2026-110701
CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter
codepeople · CP Multi View Events Calendar
High7.2 - CVE-2026-109901
WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
Codepeople · CP Multi View Event Calendar
High8.5 - CVE-2026-95598
WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability
codepeople · Search in Place
High7.1 - CVE-2026-103909
Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation
codepeople · Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Medium6.1 - CVE-2026-100184
Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value
codepeople · Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Medium4.7 - CVE-2026-96573
Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer
codepeople · Appointment Hour Booking – Booking Calendar
High7.2
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)35
- CWE-862 Missing authorization28
- CWE-352 Cross-site request forgery (CSRF)7
- CWE-89 SQL injection7
- CWE-200 Exposure of sensitive information2
- CWE-307 Excessive authentication attempts2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-1236 CSV injection1
- CWE-1284 1
- CWE-22 Path traversal1