Vulnerabilidades em codepeople
93 resultadosAnálise Vexday
CodePeople possui 49 vulnerabilidades registradas, com 6 publicadas nos últimos 90 dias, mas nenhuma atualmente sob ataque ativo conhecido (KEV). A ausência de críticas (CVSS ≥9.0) e a dominância de falhas XSS (CWE-79) indicam um perfil de risco moderado, concentrado em vulnerabilidades de aplicação web que demandam contexto de execução. A cadência recente de divulgações merece monitoramento, mas sem sinais imediatos de exploração em massa.
CVE-2026-65514MEDIUMWordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-100179MEDIUMCalculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()EPSS 0.2%CVE-2025-64261MEDIUMWordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-40791HIGHWordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-31941MEDIUMWordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-111727MEDIUMAppointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' ParameterEPSS 0.2%CVE-2026-100184MEDIUMCalculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined ValueEPSS 0.2%CVE-2025-46241HIGHWordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerabilityEPSS 0.2%CVE-2026-112379HIGHWordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49291MEDIUMWordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2026-95598HIGHWordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25465MEDIUMWordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49332MEDIUMWordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%