CVE-2025-49291

< 5.3.59

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Requ

4.3MEDIUM

CVE-2024-13382

<= 5.2.64

The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow hig

4.8MEDIUM

CVE-2024-13381

< 5.2.62

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow hig

4.8MEDIUM

CVE-2024-12273

< 5.2.62

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow hig

3.5LOW

CVE-2024-12601

< 5.2.64

The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. T

5.3MEDIUM

CVE-2024-9940

< 5.2.46

The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 5.2.45. This

5.3MEDIUM

CVE-2023-26523

< 1.1.121

Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated

4.3MEDIUM

CVE-2024-29759

< 1.2.55

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeople Calculated Fields

7.1HIGH

CVE-2024-2020

< 5.1.57

The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page href parameter in a

7.2HIGH

CVE-2024-0963

<= 1.2.52

The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's CP_CALCULATED_FIELDS

6.4MEDIUM

CVE-2023-0389

< 1.1.151

The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could all

4.8MEDIUM

CVE-2023-6446

<= 1.2.40

The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up

4.4MEDIUM

CVE-2023-51517

<= 1.2.28

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CodePeople Calculated Fields Form.This issue affects Calculat

4.1MEDIUM

CVE-2020-7228

<= 1.0.353

The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the in

5.4MEDIUM