Skip to content
OpenAdvisories

Vendor

codepeople

94 known vulnerabilities.

Products

Calculated Fields Form 13 WP Time Slots Booking Form 11 Contact Form Email 8 Appointment Booking Calendar 7 Booking Calendar Contact Form 6 Appointment Hour Booking – Booking Calendar 5 CP Multi View Event Calendar 5 CP Polls 4 Appointment Hour Booking 4 Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More 3 Music Player for WooCommerce 3 CP Contact Form with Paypal 3 Form Builder CP 2 CP Media Player 2 Google Maps CP 2 Music Store – WordPress eCommerce 2 CP Multi View Events Calendar 2 Search in Place 2 CodePeople Post Map for Google Maps 1 Music Store 1 Appointment Hour Booking (WordPress plugin) 1 Payment Form for PayPal Pro 1 cp-polls Plugin 1 Corner Ad 1 CP Blocks 1 CP Image Store with Slideshow 1 Appointment Booking Calendar (WordPress plugin) 1 Sell Downloads 1
All Critical High Medium Low Exploited only Public exploit

64 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-35735

    WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.2.11.

    codepeople WP Time Slots Booking Form
  • Medium 6.5
    CVE-2024-36082

    SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated…

    codepeople Music Store – WordPress eCommerce Web / CMS
  • Medium 5.3
    CVE-2023-48318

    WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability

    Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Contact Form Email allows Functionality Bypass.This issue affects Contact Form Email: from n/a through 1.3.41.

    codepeople Contact Form Email
  • Medium 4.3
    CVE-2023-28494

    WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability

    Missing Authorization vulnerability in CodePeople Contact Form Email allows Functionality Misuse.This issue affects Contact Form Email: from n/a through 1.3.31.

    codepeople Contact Form Email
  • Medium 4.3
    CVE-2023-28492

    WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability

    Missing Authorization vulnerability in CodePeople CP Multi View Event Calendar allows Functionality Misuse.This issue affects CP Multi View Event Calendar: from n/a through 1.4.10.

    codepeople CP Multi View Event Calendar
  • Medium 4.3
    CVE-2023-26523

    WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability

    Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120.

    codepeople Calculated Fields Form
  • Medium 4.3
    CVE-2023-26521

    WordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability

    Missing Authorization vulnerability in CodePeople Search in Place allows Functionality Misuse.This issue affects Search in Place: from n/a through 1.0.104.

    codepeople Search in Place
  • Medium 5.3
    CVE-2024-32720

    WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability

    Improper Restriction of Excessive Authentication Attempts vulnerability in CodePeople Appointment Hour Booking allows Removing Important Client Functionality.This issue affects Appointment Hour Booking: from n/a through 1.4.56.

    codepeople Appointment Hour Booking
  • Medium 5.3
    CVE-2024-24873

    WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability

    : Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls allows Flooding.This issue affects CP Polls: from n/a through 1.0.71.

    codepeople CP Polls
  • Medium 5.3
    CVE-2024-24874

    WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71.

    codepeople CP Polls
  • Medium 5.4
    CVE-2024-31941

    WordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3.

    codepeople CP Media Player
  • Medium 5.3
    CVE-2024-31302

    WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44.

    codepeople Contact Form Email
  • Medium 4.3
    CVE-2023-25039

    WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability

    Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43.

    codepeople Google Maps CP
  • Medium 6.4
    CVE-2024-0963

    Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions up to, and including, 1.2.52 due to insufficient input sanitization and output escaping on user suppli…

    codepeople Calculated Fields Form Web / CMS
  • Medium 4.3
    CVE-2022-41790

    WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.

    codepeople WP Time Slots Booking Form
  • Medium 4.4
    CVE-2023-6446

    Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    codepeople Calculated Fields Form Web / CMS
  • Medium 4.1
    CVE-2023-51517

    WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28.

    codepeople Calculated Fields Form
  • Medium 5.4
    CVE-2023-41732

    WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions.

    codepeople CP Blocks
  • Medium 5.9
    CVE-2023-23971

    WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.

    codepeople WP Time Slots Booking Form
  • Medium 4.7
    CVE-2014-125091

    codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection

    A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The …

    codepeople cp-polls Plugin
  • Medium 5.3
    CVE-2022-4036

    Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass

    The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie.

    codepeople Appointment Hour Booking – Booking Calendar Web / CMS
  • Medium 5.8
    CVE-2022-4034

    Appointment Hour Booking <= 1.3.72 - CSV Injection

    The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported …

    codepeople Appointment Hour Booking – Booking Calendar Web / CMS
  • Medium 4.3
    CVE-2022-43482

    WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

    Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress.

    codepeople Appointment Booking Calendar (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2022-41692

    WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability

    Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.

    codepeople Appointment Hour Booking (WordPress plugin) Web / CMS