Vulnerabilities in Codepeople
77 resultsVexday analysis
Codepeople apresenta perfil de risco baixo com apenas 1 vulnerabilidade catalogada, relativa a Cross-Site Scripting (CWE-79), sem evidência de exploração ativa em campo. A fragilidade recente (divulgada nos últimos 90 dias) requer monitoramento, mas a ausência de severidade crítica e de ataques documentados não configura ameaça imediata.
CVE-2026-12113MEDIUMAppointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information DisclosureEPSS 0.2%CVE-2026-32433HIGHWordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-32432MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-50025MEDIUMWordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39562MEDIUMWordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-40791HIGHWordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-31941MEDIUMWordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2023-41732MEDIUMWordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-13335MEDIUMCodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post MetaEPSS 0.2%CVE-2025-48231MEDIUMWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-64261MEDIUMWordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57670HIGHWordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-46241HIGHWordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2026-65514MEDIUMWordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25465MEDIUMWordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49291MEDIUMWordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-49332MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%