Medium · 4.3 CVE-2025-49291 EUVD-2025-17271GHSA-3x47-pxw6-fmvq

WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 6, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: codepeople Product: Calculated Fields Form

Description

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through <= 5.3.58.

Affected products

Vendor	Product	Affected	Fixed
codepeople	Calculated Fields Form	≤ 5.3.58	—

References

https://patchstack.com/database/Wordpress/Plugin/calculated-fields-form/vulnerability/wordpress-calculated-fields-form-5-3-58-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry