Vulnerabilities in codepeople
80 resultsVexday analysis
CodePeople possui 49 vulnerabilidades registradas, com 6 publicadas nos últimos 90 dias, mas nenhuma atualmente sob ataque ativo conhecido (KEV). A ausência de críticas (CVSS ≥9.0) e a dominância de falhas XSS (CWE-79) indicam um perfil de risco moderado, concentrado em vulnerabilidades de aplicação web que demandam contexto de execução. A cadência recente de divulgações merece monitoramento, mas sem sinais imediatos de exploração em massa.
CVE-2025-50025MEDIUMWordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-24626HIGHWordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57670HIGHWordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-41732MEDIUMWordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-78283HIGHWordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-78281HIGHWordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-3986MEDIUMCalculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form SettingsEPSS 0.2%CVE-2025-64369MEDIUMWordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32433HIGHWordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerabilityEPSS 0.2%CVE-2026-32432MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-65514MEDIUMWordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-39562MEDIUMWordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-40791HIGHWordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-31941MEDIUMWordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-48231MEDIUMWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-64261MEDIUMWordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-46241HIGHWordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2025-49291MEDIUMWordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-25465MEDIUMWordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49332MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%