What’s Vulnerable › Products
codepeople Calculated Fields Form vulnerabilities
16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your codepeople Calculated Fields Form version is affected
Latest codepeople Calculated Fields Form vulnerabilities
- CVE-2026-95529 — WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-3986 — Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings (CVSS 6.4)
- CVE-2026-25368 — WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2025-49291 — WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 8.8)
- CVE-2024-13382 — Calculated Fields Form < 5.2.64 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-13381 — Calculated Fields Form < 5.2.62 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-12273 — Calculated Fields Form < 5.2.62 - Admin+ Stored XSS (CVSS 3.5)
- CVE-2024-12601 — Calculated Fields Form <= 5.2.63 - Denial of Service (CVSS 5.3)
- CVE-2024-9940 — Calculated Fields Form <= 5.2.45 - HTML Injection (CVSS 4.3)
- CVE-2023-26523 — WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability (CVSS 4.3)
- CVE-2024-29759 — WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-2020 — Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2024-0963 — Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
- CVE-2023-0389 — Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields (CVSS 4.8)
- CVE-2023-51517 — WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection (CVSS 5.4)
- CVE-2020-7228 — (CVSS 5.4)