Vendor

    CodePeople

    24 known vulnerabilities in products by CodePeople, 0 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in CodePeople
    CriticalCVE-2022-1692

    CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi

    		9.8
    MediumCVE-2021-24498

    Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2022-0448

    CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting

    		4.8
    MediumCVE-2022-2846

    Calendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS

    		4.3
    MediumCVE-2019-13505

    DWBooster Appointment Hour Booking: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2022-3427

    Corner Ad <= 1.0.56 - Cross-Site Request Forgery

    also in 1 other product

    		8.8
    HighCVE-2016-20068

    WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

    		8.2
    HighCVE-2016-20069

    WordPress Booking Calendar Contact Form 1.0.23 SQL Injection

    		8.2
    HighCVE-2022-4035

    Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form

    also in 1 other product

    		7.2
    MediumCVE-2017-18579

    DWBooster Corner Ad: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2016-20084

    WordPress appointment-booking-calendar 1.1.24 Privilege Escalation XSS

    		7.2
    HighCVE-2016-20066

    WordPress CP Polls 1.0.8 Persistent Cross-Site Scripting

    		7.2
    HighCVE-2022-4034

    Appointment Hour Booking <= 1.3.72 - CSV Injection

    also in 1 other product

    		5.8
    MediumCVE-2016-20070

    WordPress Booking Calendar Contact Form 1.0.23 Privilege Escalation Stored XSS

    		6.4
    MediumCVE-2021-24712

    Appointment Hour Booking – WordPress Booking Plugin < 1.3.17 - Authenticated Stored XSS

    		5.4
    MediumCVE-2016-20067

    WordPress CP Polls 1.0.8 Cross-Site Request Forgery

    		4.3
    MediumCVE-2022-1710

    Appointment Hour Booking < 1.3.56 - Admin+ Stored Cross-Site Scripting

    		4.8
    MediumCVE-2021-24673

    Appointment Hour Booking < 1.3.16 - Authenticated Stored Cross-Site Scripting

    		4.8
    MediumCVE-2022-2169

    Loading Page with Loading Screen < 1.0.83 - Admin+ Stored Cross-Site Scripting

    		4.8
    MediumCVE-2024-13758

    CP Contact Form with PayPal <= 1.3.52 - Cross-Site Request Forgery

    also in 1 other product

    		6.5
    MediumCVE-2022-4036

    Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass

    also in 1 other product

    		5.3
    HighCVE-2022-41692

    WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability

    also in 1 other product

    		4.3
    HighCVE-2023-41732

    WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)

    also in 1 other product

    		5.4
    MediumCVE-2023-6446

    Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting

    also in 1 other product

    		4.4

    Products

    Products by CodePeople
    Appointment Hour Booking80
    Booking Calendar Contact Form30