Vulnerabilidades em codepeople
93 resultadosAnálise Vexday
CodePeople possui 49 vulnerabilidades registradas, com 6 publicadas nos últimos 90 dias, mas nenhuma atualmente sob ataque ativo conhecido (KEV). A ausência de críticas (CVSS ≥9.0) e a dominância de falhas XSS (CWE-79) indicam um perfil de risco moderado, concentrado em vulnerabilidades de aplicação web que demandam contexto de execução. A cadência recente de divulgações merece monitoramento, mas sem sinais imediatos de exploração em massa.
CVE-2026-12111MEDIUMAppointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' ParameterEPSS 0.3%CVE-2025-68850HIGHWordPress Sell Downloads plugin <= 1.1.12 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-103909MEDIUMCalculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field EquationEPSS 0.3%CVE-2024-13758MEDIUMCP Contact Form with PayPal <= 1.3.52 - Cross-Site Request ForgeryEPSS 0.3%CVE-2026-109901HIGHWordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-24626HIGHWordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-96573HIGHAppointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List RendererEPSS 0.3%CVE-2025-50025MEDIUMWordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-78283HIGHWordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-78281HIGHWordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57670HIGHWordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-95529HIGHWordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-3986MEDIUMCalculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form SettingsEPSS 0.2%CVE-2025-64369MEDIUMWordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-110701HIGHCP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' ParameterEPSS 0.2%CVE-2023-41732MEDIUMWordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-32432MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-32433HIGHWordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-48231MEDIUMWordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-39562MEDIUMWordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%