Codepeople

Calculated Fields Form

19 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-103909

  • EPSS 0.27%
  • Veröffentlicht 03.10.2026 05:29:19
  • Zuletzt bearbeitet 06.10.2026 15:04:52

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'arbitrary (whichever names the admin bound via url.<name>)' para...

4.7

CVE-2026-100184

  • EPSS 0.2%
  • Veröffentlicht 01.10.2026 08:28:44
  • Zuletzt bearbeitet 03.10.2026 16:16:31

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x (attacker-chosen name matching the form's url.<name> predefine...

6.1

CVE-2026-100179

  • EPSS 0.21%
  • Veröffentlicht 01.10.2026 08:28:40
  • Zuletzt bearbeitet 01.10.2026 15:17:17

The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'x (any URL parameter consumed by the form's calculated equation)...

7.1

CVE-2026-95529

  • EPSS 0.18%
  • Veröffentlicht 23.09.2026 18:14:43
  • Zuletzt bearbeitet 23.09.2026 19:39:08

Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1 versions.

6.4

CVE-2026-3986

  • EPSS 0.24%
  • Veröffentlicht 13.03.2026 08:25:17
  • Zuletzt bearbeitet 22.04.2026 21:30:26

The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including, 5.4.5.0. This is due to insufficient capability checks on the form settings save handler and insu...

6.5

CVE-2026-25368

  • EPSS 0.25%
  • Veröffentlicht 19.02.2026 08:26:59
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculated Fields Form: from n/a through <= 5.4.4.1.

8.8

CVE-2025-49291

  • EPSS 0.16%
  • Veröffentlicht 06.06.2025 12:53:44
  • Zuletzt bearbeitet 23.04.2026 15:31:24

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through <= 5.3.58.

4.8

CVE-2024-13382

Exploit
  • EPSS 0.31%
  • Veröffentlicht 15.05.2025 20:15:39
  • Zuletzt bearbeitet 23.05.2025 18:51:39

The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability ...

4.8

CVE-2024-13381

Exploit
  • EPSS 0.26%
  • Veröffentlicht 01.05.2025 06:00:03
  • Zuletzt bearbeitet 07.05.2025 20:09:19

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability ...

3.5

CVE-2024-12273

Exploit
  • EPSS 0.26%
  • Veröffentlicht 29.04.2025 06:00:02
  • Zuletzt bearbeitet 29.04.2025 21:05:10

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability ...