Vendor

    CodePeople

    130 known vulnerabilities in products by CodePeople, 0 of them actively exploited (CISA KEV).

    Key figures

    130

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CodePeople
    HighCVE-2020-9372

    Appointment Booking Calendar: Remote Code Execution

    		7.8
    CriticalCVE-2016-10916

    Appointment Booking Calendar: SQL Injection

    		9.8
    CriticalCVE-2016-10909

    Booking Calendar Contact Form: SQL Injection

    		9.8
    HighCVE-2026-115497

    Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter

    		7.5
    MediumCVE-2020-9371

    Appointment Booking Calendar: Cross-Site Scripting (XSS)

    		4.8
    HighCVE-2015-9348

    Sell Downloads: security vulnerability

    		7.5
    MediumCVE-2015-7666

    Payment Form for PayPal Pro: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2016-10992

    Music Store: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2015-9233

    CP Contact Form with PayPal: Cross-Site Scripting (XSS)

    		8.8
    HighCVE-2026-109901

    WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability

    		8.5
    MediumCVE-2019-14791

    Appointment Booking Calendar: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2019-9646

    Contact Form Email: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2026-93624

    WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability

    		7.2
    HighCVE-2022-3427

    Corner Ad <= 1.0.56 - Cross-Site Request Forgery

    also in 1 other product

    		8.8
    HighCVE-2026-110701

    CodePeople CP Multi View Events Calendar: Cross-site Scripting

    		7.2
    HighCVE-2026-96573

    CodePeople Appointment Hour Booking: Cross-site Scripting

    		7.2
    MediumCVE-2026-119176

    CodePeople CP Multi View Events Calendar: Cross-site Scripting

    		6.4
    HighCVE-2026-48882

    WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2015-10099

    CP Appointment Calendar Plugin: SQL Injection

    		6.3
    HighCVE-2026-112379

    WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2018-20964

    Contact Form Email: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2026-95598

    WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2024-12274

    BookingPress < 1.1.23 - Unauthenticated Export File Download

    		7.5
    HighCVE-2026-95529

    WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-24672

    WordPress Form Builder CP Plugin <= 1.2.41 - SQL Injection vulnerability

    		8.5

    All vulnerabilities in search

    Products

    Products by CodePeople
    Calculated Fields Form250
    Appointment Booking Calendar180
    Contact Form Email180
    Wp Time Slots Booking Form180
    Booking Calendar Contact Form80
    CP Contact Form with PayPal70
    Appointment Hour Booking – Booking Calendar50
    Cp Multi View Event Calendar50
    Polls CP50
    Appointment Hour Booking40
    Cp Polls40
    Form Builder Cp40
    Calculated Fields Form – AI Form Builder For Wordpress – Contact, Payment, Quote, Quiz & More30
    Google Maps Cp30
    Music Player For Woocommerce30
    Music Store30