Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Codepeople
Calculated Fields Form

codepeople Calculated Fields Form Vulnerabilities: CVEs, CISA KEV & Security Advisories

17 CVEs

CP

codepeople Calculated Fields Form Vulnerabilities

CVE security advisories and vulnerability history for Calculated Fields Form by codepeople.

17

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

5.8

Avg CVSS

2020–2026

Last updated September 23, 2026

Overview

codepeople Calculated Fields Form has 17 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 5.8.

Severity and exploitation

How the CVSS severity of codepeople Calculated Fields Form's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High4

Medium12

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of codepeople Calculated Fields Form's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of codepeople Calculated Fields Form's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every codepeople Calculated Fields Form version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 5.2.622 CVEs
< 1.1.1211 CVE
< 1.1.1511 CVE
< 1.2.551 CVE
< 5.1.571 CVE
< 5.2.461 CVE
< 5.2.641 CVE
< 5.3.591 CVE
<= 1.0.3531 CVE
<= 1.1.1201 CVE
<= 1.2.281 CVE
<= 1.2.401 CVE
<= 1.2.521 CVE
<= 1.2.541 CVE
<= 5.1.561 CVE
<= 5.2.451 CVE
<= 5.2.631 CVE
<= 5.2.641 CVE
<= 5.3.581 CVE
<= 5.4.4.11 CVE
<= 5.4.5.01 CVE
<= 5.5.1.11 CVE
>= 1.1.1211 CVE
>= 1.2.291 CVE
>= 1.2.551 CVE
>= 5.3.591 CVE
>= 5.4.4.21 CVE
>= 5.5.1.21 CVE

Fixed in

5.2.622 CVEs
1.1.1211 CVE
1.1.1511 CVE
1.2.291 CVE
1.2.551 CVE
5.1.571 CVE
5.2.461 CVE
5.2.641 CVE
5.3.591 CVE
5.4.4.21 CVE
5.5.1.21 CVE

Find a version

17 CVEs

Sort

WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-95529
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (7th pct)2026-09-23
Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings
CVE-2026-3986CWE-79
Medium · CVSS 6.4
EPSS 0.3% (26th pct)2026-03-13
WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability
CVE-2026-25368
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.3% (17th pct)2026-02-19
WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-49291
Patch
CWE-352
High · CVSS 8.8
EPSS 0.2% (7th pct)2025-06-06
Medium vulnerability · 2025-05-15
CVE-2024-13382
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.3% (24th pct)2025-05-15
Medium vulnerability · 2025-05-01
CVE-2024-13381
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.3% (18th pct)2025-05-01
Low vulnerability · 2025-04-29
CVE-2024-12273
Public exploit
Patch
CWE-79
Low · CVSS 3.5
EPSS 0.3% (18th pct)2025-04-29
Calculated Fields Form <= 5.2.63 - Denial of Service
CVE-2024-12601
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.6% (46th pct)2024-12-17
Calculated Fields Form <= 5.2.45 - HTML Injection
CVE-2024-9940
Patch
CWE-75
Medium · CVSS 5.3
EPSS 0.4% (32th pct)2024-10-17
WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability
CVE-2023-26523
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (23th pct)2024-06-03
WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29759
Patch
CWE-79
High · CVSS 7.1
EPSS 0.4% (35th pct)2024-03-27
Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-2020
Patch
CWE-79
High · CVSS 7.2
EPSS 0.6% (46th pct)2024-03-13
Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0963CWE-79
Medium · CVSS 6.4
EPSS 0.5% (40th pct)2024-02-02
Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields
CVE-2023-0389
Public exploit
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.5% (39th pct)2024-01-16
Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2023-6446CWE-87
Medium · CVSS 4.8
EPSS 0.3% (21th pct)2024-01-11
WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection
CVE-2023-51517
Patch
CWE-601
Medium · CVSS 5.4
EPSS 0.3% (21th pct)2023-12-29
Medium vulnerability · 2020-01-22
CVE-2020-7228CWE-79
Medium · CVSS 5.4
EPSS 1.0% (62th pct)2020-01-22

Common weakness types

The CWE weakness categories most often found in codepeople Calculated Fields Form CVEs. Follow any weakness for its full explanation.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-862Missing Authorization2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVE
CWE-352Cross-Site Request Forgery (CSRF)1 CVE
CWE-87Improper Neutralization of Alternate XSS Syntax1 CVE
CWE-75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)1 CVE
CWE-400Uncontrolled Resource Consumption1 CVE

Disclosure activity by year

How many codepeople Calculated Fields Form CVEs were published each year.

2020

1

2023

1

2024

8

2025

4

2026

3

Other codepeople products

Browse vulnerabilities for other products by codepeople.

appointment booking calendar15 CVEs Contact Form Email13 CVEs Booking Calendar Contact Form12 CVEs WP Time Slots Booking Form12 CVEs cp contact form with paypal7 CVEs polls cp7 CVEs Appointment Hour Booking – Booking Calendar5 CVEs CP Multi View Event Calendar5 CVEs

All codepeople vulnerabilities

Frequently asked questions

Common questions about codepeople Calculated Fields Form vulnerabilities.

How many CVEs does codepeople Calculated Fields Form have?: codepeople Calculated Fields Form has 17 published CVE records since 2020.
How many codepeople Calculated Fields Form CVEs are in CISA KEV?: None of codepeople Calculated Fields Form's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for codepeople Calculated Fields Form vulnerabilities?: Yes — 4 of codepeople Calculated Fields Form's CVEs have a known public exploit.
Which versions of codepeople Calculated Fields Form are affected?: 39 distinct codepeople Calculated Fields Form versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in codepeople Calculated Fields Form CVEs?: codepeople Calculated Fields Form's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-352 (Cross-Site Request Forgery (CSRF)).
What is the average severity of codepeople Calculated Fields Form CVEs?: The average CVSS base score across codepeople Calculated Fields Form's scored CVEs is 5.8.

References

All codepeople vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track codepeople Calculated Fields Form vulnerabilities

Get an alert for each new codepeople Calculated Fields Form CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References