Skip to content
OpenAdvisories

Vendor

codepeople

94 known vulnerabilities.

Products

Calculated Fields Form 13 WP Time Slots Booking Form 11 Contact Form Email 8 Appointment Booking Calendar 7 Booking Calendar Contact Form 6 Appointment Hour Booking – Booking Calendar 5 CP Multi View Event Calendar 5 CP Polls 4 Appointment Hour Booking 4 Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More 3 Music Player for WooCommerce 3 CP Contact Form with Paypal 3 Form Builder CP 2 CP Media Player 2 Google Maps CP 2 Music Store – WordPress eCommerce 2 CP Multi View Events Calendar 2 Search in Place 2 CodePeople Post Map for Google Maps 1 Music Store 1 Appointment Hour Booking (WordPress plugin) 1 Payment Form for PayPal Pro 1 cp-polls Plugin 1 Corner Ad 1 CP Blocks 1 CP Image Store with Slideshow 1 Appointment Booking Calendar (WordPress plugin) 1 Sell Downloads 1
All Critical High Medium Low Exploited only Public exploit

94 results · Feed

  • Medium 6.4
    CVE-2024-0963

    Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS shortcode in all versions up to, and including, 1.2.52 due to insufficient input sanitization and output escaping on user suppli…

    codepeople Calculated Fields Form Web / CMS
  • Medium 4.3
    CVE-2022-41790

    WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control

    Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76.

    codepeople WP Time Slots Booking Form
  • Medium 4.4
    CVE-2023-6446

    Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.40 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    codepeople Calculated Fields Form Web / CMS
  • Medium 4.1
    CVE-2023-51517

    WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculated Fields Form: from n/a through 1.2.28.

    codepeople Calculated Fields Form
  • Medium 5.4
    CVE-2023-41732

    WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions.

    codepeople CP Blocks
  • High 7.1
    CVE-2023-36384

    WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40 versions.

    codepeople Booking Calendar Contact Form
  • Medium 5.9
    CVE-2023-23971

    WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CodePeople WP Time Slots Booking Form plugin <= 1.1.81 versions.

    codepeople WP Time Slots Booking Form
  • Medium 4.7
    CVE-2014-125091

    codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection

    A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The …

    codepeople cp-polls Plugin
  • High 8.8
    CVE-2022-3427

    Corner Ad <= 1.0.56 - Cross-Site Request Forgery

    The Corner Ad plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.56. This is due to missing or incorrect nonce validation on its corner_ad_settings_page function. This makes it possible for unauthenticated a…

    codepeople Corner Ad Web / CMS
  • Medium 5.3
    CVE-2022-4036

    Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass

    The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to the use of insufficiently strong hashing algorithm on the CAPTCHA secret that is also displayed to the user via a cookie.

    codepeople Appointment Hour Booking – Booking Calendar Web / CMS
  • High 7.2
    CVE-2022-4035

    Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form

    The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field parameters in versions up to, and including, 1.3.72 due to insufficient input sanitization and output escaping that makes injecting iFrame tag…

    codepeople Appointment Hour Booking – Booking Calendar Web / CMS
  • Medium 5.8
    CVE-2022-4034

    Appointment Hour Booking <= 1.3.72 - CSV Injection

    The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it possible for unauthenticated attackers to embed untrusted input into content during booking creation that may be exported …

    codepeople Appointment Hour Booking – Booking Calendar Web / CMS
  • Medium 4.3
    CVE-2022-43482

    WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

    Missing Authorization vulnerability in Appointment Booking Calendar plugin <= 1.3.69 on WordPress.

    codepeople Appointment Booking Calendar (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2022-41692

    WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability

    Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.

    codepeople Appointment Hour Booking (WordPress plugin) Web / CMS