Vulnerabilities in Codepeople

81 results
Vexday analysis

Codepeople apresenta perfil de risco baixo com apenas 1 vulnerabilidade catalogada, relativa a Cross-Site Scripting (CWE-79), sem evidência de exploração ativa em campo. A fragilidade recente (divulgada nos últimos 90 dias) requer monitoramento, mas a ausência de severidade crítica e de ataques documentados não configura ameaça imediata.

CVE-2025-68850HIGHWordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-13758MEDIUMCP Contact Form with PayPal <= 1.3.52 - Cross-Site Request ForgeryEPSS 0.3%CVE-2026-25368MEDIUMWordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-50025MEDIUMWordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-24626HIGHWordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-78281HIGHWordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-78283HIGHWordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57670HIGHWordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-40791HIGHWordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-41732MEDIUMWordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2025-64369MEDIUMWordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25465MEDIUMWordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65514MEDIUMWordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39562MEDIUMWordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-48231MEDIUMWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2024-31941MEDIUMWordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-64261MEDIUMWordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-46241HIGHWordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2026-95529HIGHWordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49291MEDIUMWordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%