[ Vendor · 10 CVEs ]
codepeople
CVEs affecting codepeople published in the last 30 days, plus any codepeople CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-112379 | 22 Oct 2026 | CVSS 7.1 | Codepeople Contact Form EmailImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email… | |
| CVE-2026-110701 | 16 Oct 2026 | CVSS 7.2 | codepeople CP Multi View Events CalendarThe CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CalendarTitle' parameter in all versions… | |
| CVE-2026-109901 | 14 Oct 2026 | CVSS 8.5 | Codepeople CP Multi View Event CalendarImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar… | |
| CVE-2026-95598 | 9 Oct 2026 | CVSS 7.1 | codepeople Search in PlaceImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place… | |
| CVE-2026-103909 | 3 Oct 2026 | CVSS 6.1 | codepeople Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & MoreThe Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected… | |
| CVE-2026-96573 | 1 Oct 2026 | CVSS 7.2 | codepeople Appointment Hour Booking – Booking CalendarThe Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form… | |
| CVE-2026-100184 | 1 Oct 2026 | CVSS 4.7 | codepeople Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & MoreThe Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected… | |
| CVE-2026-100179 | 1 Oct 2026 | CVSS 6.1 | codepeople Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & MoreThe Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected… | |
| CVE-2026-93624 | 30 Sep 2026 | CVSS 7.2 | codepeople Music Player for WooCommerceShop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. | |
| CVE-2026-95529 | 23 Sep 2026 | CVSS 7.1 | codepeople Calculated Fields FormUnauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions. |