Product by CodePeople
Calculated Fields Form
17 known vulnerabilities in Calculated Fields Form (CodePeople), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-95529 | WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability | 7.1 | |
| High | CVE-2024-2020 | Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting | 7.2 | |
| Medium | CVE-2020-7228 | Calculated Fields Form: Cross-Site Scripting (XSS) | 5.4 | |
| Medium | CVE-2024-12601 | Calculated Fields Form <= 5.2.63 - Denial of Service | 5.3 | |
| High | CVE-2024-29759 | CodePeople Calculated Fields Form: Cross-site Scripting | 7.1 | |
| Medium | CVE-2026-25368 | WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2024-0963 | Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | |
| Medium | CVE-2026-3986 | CodePeople Calculated Fields Form: Cross-site Scripting | 6.4 | |
| Medium | CVE-2024-9940 | Calculated Fields Form <= 5.2.45 - HTML Injection | 5.3 | |
| Medium | CVE-2023-0389 | Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields | 4.8 | |
| Medium | CVE-2024-13382 | Calculated Fields Form < 5.2.64 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2024-13381 | Calculated Fields Form < 5.2.62 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2023-26523 | CodePeople Calculated Fields Form: Missing Authorization | 4.3 | |
| High | CVE-2025-49291 | WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability | 4.3 | |
| Medium | CVE-2023-6446 | Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting | 4.4 | |
| Low | CVE-2024-12273 | Calculated Fields Form < 5.2.62 - Admin+ Stored XSS | 3.5 | |
| Medium | CVE-2023-51517 | WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection | 4.1 |