Vulnerabilities in CodePeople

81 results
Vexday analysis

CodePeople possui 26 vulnerabilidades registradas, nenhuma sob ataque ativo no momento e sem críticas conhecidas, indicando risco moderado e controlável. A fraqueza dominante (CWE-862 - Falta de Autorização) sugere problemas de controle de acesso, tipicamente remediáveis. A ausência de publicações recentes nas últimas 12 semanas reforça que o panorama de risco não apresenta urgência imediata.

CVE-2026-6810MEDIUMBooking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar TakeoverEPSS 0.4%CVE-2024-29759HIGHWordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-24873MEDIUMWordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerabilityEPSS 0.4%CVE-2024-33543HIGHWordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-24874MEDIUMWordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerabilityEPSS 0.4%CVE-2023-36384HIGHWordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-35735MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-46247MEDIUMWordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control VulnerabilityEPSS 0.4%CVE-2023-23971MEDIUMWordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-12113MEDIUMAppointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information DisclosureEPSS 0.4%CVE-2024-9940MEDIUMCalculated Fields Form <= 5.2.45 - HTML InjectionEPSS 0.4%CVE-2023-45649MEDIUMWordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-32433HIGHWordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-48882HIGHWordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-13384HIGHCP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment ConfirmationEPSS 0.4%CVE-2026-13335MEDIUMCodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post MetaEPSS 0.4%CVE-2024-32720MEDIUMWordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerabilityEPSS 0.4%CVE-2026-66679MEDIUMWordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-3986MEDIUMCalculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form SettingsEPSS 0.3%CVE-2026-32483MEDIUMWordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerabilityEPSS 0.3%