{"items":[{"id":"CVE-2026-119176","published":"2026-10-30T17:15:24.563Z","updated":"2026-10-30T18:08:59.759Z","title":"CP Multi View Events Calendar <= 1.4.43 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'Subject' Parameter","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"CP Multi View Events Calendar","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2026-111727","published":"2026-10-28T03:42:54.736Z","updated":"2026-10-29T01:41:55.179Z","title":"Appointment Booking Calendar <= 1.4.05 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'vs_text_submitbtn' Parameter","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00206,"kevAdded":null},{"id":"CVE-2026-115497","published":"2026-10-23T04:31:53.752Z","updated":"2026-10-23T10:56:08.025Z","title":"Music Store <= 1.4.7 - Unauthenticated Arbitrary File Read via 'f' Parameter","severity":"HIGH","score":7.5,"vendor":"codepeople","product":"Music Store – WordPress eCommerce","kev":false,"epss":0.00885,"kevAdded":null},{"id":"CVE-2026-112379","published":"2026-10-22T07:01:09.851Z","updated":"2026-10-22T10:56:15.899Z","title":"WordPress Contact Form Email plugin <= 1.3.68 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Codepeople","product":"Contact Form Email","kev":false,"epss":0.0019,"kevAdded":null},{"id":"CVE-2026-110701","published":"2026-10-16T06:41:00.578Z","updated":"2026-10-16T14:26:52.924Z","title":"CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter","severity":"HIGH","score":7.2,"vendor":"codepeople","product":"CP Multi View Events Calendar","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-109901","published":"2026-10-14T07:11:16.010Z","updated":"2026-10-14T15:56:23.123Z","title":"WordPress CP Multi View Event Calendar  plugin <= 1.4.41 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Codepeople","product":"CP Multi View Event Calendar","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-95598","published":"2026-10-09T10:00:20.071Z","updated":"2026-10-09T17:43:35.650Z","title":"WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"Search in Place","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2026-103909","published":"2026-10-03T05:29:19.279Z","updated":"2026-10-03T15:42:43.422Z","title":"Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation","severity":"MEDIUM","score":6.1,"vendor":"codepeople","product":"Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2026-100184","published":"2026-10-01T08:28:44.400Z","updated":"2026-10-03T15:42:51.710Z","title":"Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value","severity":"MEDIUM","score":4.7,"vendor":"codepeople","product":"Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-96573","published":"2026-10-01T08:28:42.513Z","updated":"2026-10-01T14:13:25.726Z","title":"Appointment Hour Booking <= 1.5.97 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar List Renderer","severity":"HIGH","score":7.2,"vendor":"codepeople","product":"Appointment Hour Booking – Booking Calendar","kev":false,"epss":0.00259,"kevAdded":null},{"id":"CVE-2026-100179","published":"2026-10-01T08:28:40.837Z","updated":"2026-10-01T14:07:25.580Z","title":"Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()","severity":"MEDIUM","score":6.1,"vendor":"codepeople","product":"Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2026-93624","published":"2026-09-30T12:26:53.638Z","updated":"2026-09-30T13:27:08.911Z","title":"WordPress Music Player for WooCommerce plugin <= 1.9.1 - PHP Object Injection vulnerability","severity":"HIGH","score":7.2,"vendor":"codepeople","product":"Music Player for WooCommerce","kev":false,"epss":0.00359,"kevAdded":null},{"id":"CVE-2026-95529","published":"2026-09-23T18:14:43.141Z","updated":"2026-09-23T18:46:51.417Z","title":"WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-78283","published":"2026-08-27T09:00:01.262Z","updated":"2026-08-27T14:57:20.125Z","title":"WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"Music Player for WooCommerce","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-78281","published":"2026-08-27T09:00:00.322Z","updated":"2026-08-27T12:17:56.974Z","title":"WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"CP Media Player","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-66679","published":"2026-08-18T13:59:56.075Z","updated":"2026-08-18T19:48:22.173Z","title":"WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Appointment Hour Booking","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2026-65514","published":"2026-07-23T11:19:09.754Z","updated":"2026-07-23T14:04:49.364Z","title":"WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Appointment Hour Booking","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2026-57670","published":"2026-07-02T11:15:29.530Z","updated":"2026-07-02T12:10:00.416Z","title":"WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Codepeople","product":"Google Maps CP","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-12113","published":"2026-07-01T04:32:26.135Z","updated":"2026-07-01T10:42:11.567Z","title":"Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure","severity":"MEDIUM","score":4.3,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2026-13335","published":"2026-06-27T01:27:21.460Z","updated":"2026-06-29T14:54:22.340Z","title":"CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"CodePeople Post Map for Google Maps","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2026-12111","published":"2026-06-18T06:50:06.952Z","updated":"2026-06-18T12:42:19.850Z","title":"Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter","severity":"MEDIUM","score":4.3,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00277,"kevAdded":null},{"id":"CVE-2026-48882","published":"2026-06-15T20:19:02.652Z","updated":"2026-06-16T01:22:54.347Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"codepeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2026-40791","published":"2026-06-15T20:18:26.123Z","updated":"2026-06-16T01:28:26.570Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-6810","published":"2026-04-24T05:29:38.488Z","updated":"2026-04-24T13:55:26.615Z","title":"Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Booking Calendar Contact Form","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-32483","published":"2026-03-25T16:14:57.726Z","updated":"2026-04-29T09:52:00.864Z","title":"WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Contact Form Email","kev":false,"epss":0.00307,"kevAdded":null},{"id":"CVE-2026-25465","published":"2026-03-25T16:14:51.810Z","updated":"2026-04-28T16:14:59.404Z","title":"WordPress CP Multi View Event Calendar  plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"CP Multi View Event Calendar","kev":false,"epss":0.00167,"kevAdded":null},{"id":"CVE-2026-32433","published":"2026-03-13T11:42:18.460Z","updated":"2026-04-29T09:51:59.288Z","title":"WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"codepeople","product":"CP Contact Form with Paypal","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2026-32432","published":"2026-03-13T11:42:18.279Z","updated":"2026-04-29T09:51:59.166Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00237,"kevAdded":null},{"id":"CVE-2026-3986","published":"2026-03-13T08:25:17.634Z","updated":"2026-04-08T17:26:18.663Z","title":"Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-25368","published":"2026-02-19T08:26:59.947Z","updated":"2026-04-28T16:14:56.896Z","title":"WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-1083","published":"2026-01-28T05:30:19.326Z","updated":"2026-04-08T17:13:20.372Z","title":"Appointment Hour Booking – Booking Calendar <= 1.5.60 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Min/Max Length' Field Configuration","severity":"MEDIUM","score":4.4,"vendor":"codepeople","product":"Appointment Hour Booking – Booking Calendar","kev":false,"epss":0.00285,"kevAdded":null},{"id":"CVE-2026-0684","published":"2026-01-13T13:49:12.628Z","updated":"2026-04-08T16:43:13.418Z","title":"CP Image Store with Slideshow <= 1.1.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Product Import","severity":"MEDIUM","score":4.3,"vendor":"codepeople","product":"CP Image Store with Slideshow","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2025-68850","published":"2026-01-05T10:43:35.490Z","updated":"2026-04-29T09:51:56.662Z","title":"WordPress Sell Downloads  plugin <= 1.1.12 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"codepeople","product":"Sell Downloads","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2025-68569","published":"2025-12-24T13:10:36.669Z","updated":"2026-04-28T16:14:30.612Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2025-10019","published":"2025-12-18T07:21:40.448Z","updated":"2026-04-28T16:10:57.279Z","title":"WordPress Contact Form Email plugin <= 1.3.60 - Insecure Direct Object References (IDOR) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Contact Form Email","kev":false,"epss":0.00437,"kevAdded":null},{"id":"CVE-2025-13318","published":"2025-11-22T08:30:29.623Z","updated":"2026-04-08T17:04:13.473Z","title":"Booking Calendar Contact Form <= 1.2.60 - Missing Authorization to Unauthenticated Arbitrary Booking Confirmation via 'dex_bccf_ipn' Parameter","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Booking Calendar Contact Form","kev":false,"epss":0.00325,"kevAdded":null},{"id":"CVE-2025-13384","published":"2025-11-22T07:29:19.553Z","updated":"2026-04-08T16:57:57.779Z","title":"CP Contact Form with PayPal <= 1.3.56 - Missing Authorization to Unauthenticated Arbitrary Payment Confirmation","severity":"HIGH","score":7.5,"vendor":"codepeople","product":"CP Contact Form with PayPal","kev":false,"epss":0.0038,"kevAdded":null},{"id":"CVE-2025-13317","published":"2025-11-22T07:29:18.875Z","updated":"2026-04-08T16:57:22.135Z","title":"Appointment Booking Calendar <= 1.3.96 - Missing Authorization to Arbitrary Booking Confirmation via 'cpabc_ipncheck' Parameter","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00299,"kevAdded":null},{"id":"CVE-2025-64369","published":"2025-11-13T09:24:33.215Z","updated":"2026-04-28T18:31:48.885Z","title":"WordPress Contact Form Email plugin <= 1.3.58 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Contact Form Email","kev":false,"epss":0.00248,"kevAdded":null},{"id":"CVE-2025-64261","published":"2025-11-13T09:24:27.476Z","updated":"2026-04-28T16:14:12.817Z","title":"WordPress Appointment Booking Calendar plugin <= 1.3.95 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2025-58009","published":"2025-09-22T18:24:09.538Z","updated":"2026-04-28T16:13:40.680Z","title":"WordPress CP Multi View Event Calendar  plugin <= 1.4.35 - Broken Access Control vulnerability","severity":"LOW","score":3.8,"vendor":"codepeople","product":"CP Multi View Event Calendar","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2025-48231","published":"2025-07-04T11:18:02.980Z","updated":"2026-04-28T16:12:53.652Z","title":"WordPress Booking Calendar Contact Form plugin <= 1.2.58 - Cross Site Scripting (XSS) Vulnerability","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Booking Calendar Contact Form","kev":false,"epss":0.00231,"kevAdded":null},{"id":"CVE-2025-50025","published":"2025-06-20T15:03:56.190Z","updated":"2026-04-28T16:13:16.411Z","title":"WordPress CP Polls plugin <= 1.0.81 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.9,"vendor":"codepeople","product":"CP Polls","kev":false,"epss":0.00256,"kevAdded":null},{"id":"CVE-2025-49332","published":"2025-06-06T12:53:57.993Z","updated":"2026-04-28T16:13:01.493Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.30 - Cross Site Request Forgery (CSRF) Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"codepeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00151,"kevAdded":null},{"id":"CVE-2025-49291","published":"2025-06-06T12:53:44.559Z","updated":"2026-04-28T16:13:00.350Z","title":"WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2025-47472","published":"2025-05-07T14:19:44.797Z","updated":"2026-04-28T16:12:42.391Z","title":"WordPress Music Player for WooCommerce plugin <= 1.5.1 - Broken Access Control Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"codepeople","product":"Music Player for WooCommerce","kev":false,"epss":0.00334,"kevAdded":null},{"id":"CVE-2025-46247","published":"2025-04-22T09:53:31.891Z","updated":"2026-04-28T16:12:36.985Z","title":"WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2025-46241","published":"2025-04-22T09:53:28.272Z","updated":"2026-04-28T16:12:36.933Z","title":"WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability","severity":"HIGH","score":8.2,"vendor":"codepeople","product":"Appointment Booking Calendar","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2025-39562","published":"2025-04-17T15:46:48.970Z","updated":"2026-04-29T09:51:55.510Z","title":"WordPress Payment Form for PayPal Pro plugin <= 1.1.72 - Cross Site Scripting (XSS) Vulnerability","severity":"MEDIUM","score":5.9,"vendor":"codepeople","product":"Payment Form for PayPal Pro","kev":false,"epss":0.00227,"kevAdded":null},{"id":"CVE-2024-13758","published":"2025-01-30T08:21:26.061Z","updated":"2026-04-08T16:50:28.729Z","title":"CP Contact Form with PayPal <= 1.3.52 - Cross-Site Request Forgery","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"CP Contact Form with PayPal","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2025-24626","published":"2025-01-27T14:22:16.202Z","updated":"2026-05-11T23:19:57.378Z","title":"WordPress Music Store – WordPress eCommerce Plugin <= 1.1.19 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"Music Store","kev":false,"epss":0.00266,"kevAdded":null},{"id":"CVE-2025-24723","published":"2025-01-24T17:25:13.465Z","updated":"2026-04-28T16:11:32.983Z","title":"WordPress Booking Calendar Contact Form Plugin <= 1.2.55 - Stored Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.9,"vendor":"codepeople","product":"Booking Calendar Contact Form","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2025-24727","published":"2025-01-24T17:25:08.781Z","updated":"2026-04-28T16:11:33.504Z","title":"WordPress Contact Form to Email Plugin <= 1.3.52 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.9,"vendor":"codepeople","product":"Contact Form Email","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2025-24672","published":"2025-01-24T17:24:46.086Z","updated":"2026-04-28T16:11:31.660Z","title":"WordPress Form Builder CP Plugin <= 1.2.41 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"codepeople","product":"Form Builder CP","kev":false,"epss":0.00478,"kevAdded":null},{"id":"CVE-2024-13680","published":"2025-01-24T07:04:08.504Z","updated":"2026-04-08T17:12:08.839Z","title":"Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection","severity":"MEDIUM","score":6.5,"vendor":"codepeople","product":"Form Builder CP","kev":false,"epss":0.00456,"kevAdded":null},{"id":"CVE-2023-45649","published":"2025-01-02T11:59:53.263Z","updated":"2026-04-29T09:51:49.751Z","title":"WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Appointment Hour Booking","kev":false,"epss":0.00381,"kevAdded":null},{"id":"CVE-2024-12601","published":"2024-12-17T11:10:17.899Z","updated":"2026-04-08T16:40:50.781Z","title":"Calculated Fields Form <= 5.2.63 - Denial of Service","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00578,"kevAdded":null},{"id":"CVE-2023-23814","published":"2024-12-09T11:31:51.027Z","updated":"2026-04-28T16:08:02.816Z","title":"WordPress Calendar Event Multi View plugin <= 1.4.13 - Broken Access Control vulnerability","severity":"LOW","score":3.8,"vendor":"CodePeople","product":"CP Multi View Event Calendar","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2023-23895","published":"2024-12-09T11:31:43.952Z","updated":"2026-04-28T16:08:03.908Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.7,"vendor":"CodePeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00711,"kevAdded":null},{"id":"CVE-2023-25037","published":"2024-12-09T11:31:37.517Z","updated":"2026-04-28T16:08:06.761Z","title":"WordPress Booking Calendar Contact Form plugin <= 1.2.34 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Booking Calendar Contact Form","kev":false,"epss":0.00556,"kevAdded":null},{"id":"CVE-2024-9940","published":"2024-10-17T02:06:05.303Z","updated":"2026-04-08T17:29:17.365Z","title":"Calculated Fields Form <= 5.2.45 - HTML Injection","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2024-47297","published":"2024-10-06T11:46:08.770Z","updated":"2026-05-12T22:51:29.447Z","title":"WordPress Polls CP plugin <= 1.0.74 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"codepeople","product":"CP Polls","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-35735","published":"2024-06-10T07:43:15.984Z","updated":"2026-04-28T16:09:54.096Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodePeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2024-33543","published":"2024-06-09T12:11:16.334Z","updated":"2026-04-28T16:09:42.710Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"CodePeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00417,"kevAdded":null},{"id":"CVE-2024-35734","published":"2024-06-08T12:49:14.058Z","updated":"2026-04-28T16:09:54.084Z","title":"WordPress WP Time Slots Booking Form plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"CodePeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00308,"kevAdded":null},{"id":"CVE-2024-36082","published":"2024-06-07T03:42:21.207Z","updated":"2024-10-30T19:21:50.395Z","title":"SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative…","severity":"MEDIUM","score":6.5,"vendor":"CodePeople","product":"Music Store - WordPress eCommerce","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2023-48318","published":"2024-06-04T10:26:32.998Z","updated":"2026-04-28T16:08:54.175Z","title":"WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodePeople","product":"Contact Form Email","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2023-28494","published":"2024-06-04T07:06:01.935Z","updated":"2026-04-28T16:08:16.171Z","title":"WordPress Contact Form Email plugin <= 1.3.31 - Missing Authorization Leading To Feedback Submission Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Contact Form Email","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2023-28492","published":"2024-06-03T22:09:38.211Z","updated":"2026-04-28T16:08:15.952Z","title":"WordPress Calendar Event Multi View plugin <= 1.4.10 - Missing Authorization Leading To Feedback Submission vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"CP Multi View Event Calendar","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2023-26523","published":"2024-06-03T21:42:10.490Z","updated":"2026-04-28T16:08:12.329Z","title":"WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Calculated Fields Form","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2023-26521","published":"2024-06-03T21:37:52.972Z","updated":"2026-04-28T16:08:12.075Z","title":"WordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Search in Place","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-32720","published":"2024-05-17T09:37:28.430Z","updated":"2026-04-28T16:09:39.733Z","title":"WordPress Appointment Hour Booking plugin <= 1.4.56 - Captcha Bypass vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodePeople","product":"Appointment Hour Booking","kev":false,"epss":0.00351,"kevAdded":null},{"id":"CVE-2024-24873","published":"2024-05-17T08:24:16.872Z","updated":"2026-04-28T16:09:11.029Z","title":"WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodePeople","product":"CP Polls","kev":false,"epss":0.0042,"kevAdded":null},{"id":"CVE-2024-24874","published":"2024-05-17T08:23:36.429Z","updated":"2026-04-28T16:09:11.188Z","title":"WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodePeople","product":"CP Polls","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2024-31941","published":"2024-04-15T09:11:49.238Z","updated":"2026-04-28T16:09:33.539Z","title":"WordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"CodePeople","product":"CP Media Player","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2024-31302","published":"2024-04-10T15:32:41.272Z","updated":"2026-04-28T16:09:30.660Z","title":"WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"CodePeople","product":"Contact Form Email","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2024-29759","published":"2024-03-27T13:17:51.913Z","updated":"2026-04-28T16:09:17.774Z","title":"WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"CodePeople","product":"Calculated Fields Form","kev":false,"epss":0.00421,"kevAdded":null},{"id":"CVE-2023-25039","published":"2024-03-25T11:46:49.366Z","updated":"2026-04-28T16:08:06.911Z","title":"WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Google Maps CP","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2024-2020","published":"2024-03-13T15:26:46.255Z","updated":"2026-04-08T16:49:38.812Z","title":"Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting","severity":"HIGH","score":7.2,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00577,"kevAdded":null},{"id":"CVE-2024-0963","published":"2024-02-02T11:34:15.217Z","updated":"2026-04-08T17:26:51.216Z","title":"Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00476,"kevAdded":null},{"id":"CVE-2022-41790","published":"2024-01-17T18:13:44.505Z","updated":"2026-04-28T16:07:49.716Z","title":"WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00466,"kevAdded":null},{"id":"CVE-2023-6446","published":"2024-01-11T06:49:33.201Z","updated":"2026-04-08T17:21:35.136Z","title":"Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting","severity":"MEDIUM","score":4.4,"vendor":"codepeople","product":"Calculated Fields Form","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2023-51517","published":"2023-12-29T14:48:26.252Z","updated":"2026-04-28T16:09:03.615Z","title":"WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection","severity":"MEDIUM","score":4.1,"vendor":"CodePeople","product":"Calculated Fields Form","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2023-41732","published":"2023-10-06T14:44:42.631Z","updated":"2026-04-28T16:08:38.594Z","title":"WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":5.4,"vendor":"CodePeople","product":"CP Blocks","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2023-36384","published":"2023-07-18T14:17:40.116Z","updated":"2026-04-28T16:08:31.402Z","title":"WordPress Booking Calendar Contact Form Plugin <= 1.2.40 is vulnerable to Cross Site Scripting (XSS)","severity":"HIGH","score":7.1,"vendor":"CodePeople","product":"Booking Calendar Contact Form","kev":false,"epss":0.00406,"kevAdded":null},{"id":"CVE-2023-23971","published":"2023-04-06T05:04:10.875Z","updated":"2026-04-28T16:08:04.228Z","title":"WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":5.9,"vendor":"CodePeople","product":"WP Time Slots Booking Form","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2014-125091","published":"2023-03-04T22:00:04.656Z","updated":"2025-03-05T19:25:09.890Z","title":"codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection","severity":"MEDIUM","score":4.7,"vendor":"codepeople","product":"cp-polls Plugin","kev":false,"epss":0.00788,"kevAdded":null},{"id":"CVE-2022-3427","published":"2022-12-15T04:02:40.319Z","updated":"2026-04-08T16:34:40.558Z","title":"Corner Ad <= 1.0.56 - Cross-Site Request Forgery","severity":"HIGH","score":8.8,"vendor":"codepeople","product":"Corner Ad","kev":false,"epss":0.00698,"kevAdded":null},{"id":"CVE-2022-4036","published":"2022-11-29T20:34:59.668Z","updated":"2026-04-08T17:33:29.365Z","title":"Appointment Hour Booking <= 1.3.72 - CAPTCHA Bypass","severity":"MEDIUM","score":5.3,"vendor":"codepeople","product":"Appointment Hour Booking – Booking Calendar","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2022-4035","published":"2022-11-29T20:32:28.799Z","updated":"2026-04-08T17:04:59.039Z","title":"Appointment Hour Booking <= 1.3.72 - Unauthenticated iFrame Injection via Appointment Form","severity":"HIGH","score":7.2,"vendor":"codepeople","product":"Appointment Hour Booking – Booking Calendar","kev":false,"epss":0.00774,"kevAdded":null},{"id":"CVE-2022-4034","published":"2022-11-29T20:30:15.537Z","updated":"2026-04-08T17:16:42.410Z","title":"Appointment Hour Booking <= 1.3.72 - CSV Injection","severity":"MEDIUM","score":5.8,"vendor":"codepeople","product":"Appointment Hour Booking – Booking Calendar","kev":false,"epss":0.00684,"kevAdded":null},{"id":"CVE-2022-43482","published":"2022-11-18T19:03:50.226Z","updated":"2026-04-28T16:07:50.862Z","title":"WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Appointment Booking Calendar (WordPress plugin)","kev":false,"epss":0.00549,"kevAdded":null},{"id":"CVE-2022-41692","published":"2022-11-18T18:54:29.858Z","updated":"2026-04-28T16:07:49.692Z","title":"WordPress Appointment Hour Booking plugin <= 1.3.71 - Missing Authorization vulnerability","severity":"MEDIUM","score":4.3,"vendor":"CodePeople","product":"Appointment Hour Booking (WordPress plugin)","kev":false,"epss":0.00549,"kevAdded":null}]}