codepeople
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting codepeople.
- CVE-2026-78283WordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-78281WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-66679WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability6.5
- CVE-2026-65514WordPress Appointment Hour Booking plugin <= 1.5.86 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2026-57670WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-12113Appointment Booking Calendar <= 1.4.02 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Disclosure4.3
- CVE-2026-13335CodePeople Post Map for Google Maps <= 1.2.6 - Authenticated (Contributor +) Stored Cross-Site Scripting via 'cpm_point' Post Meta6.4
- CVE-2026-12111Appointment Booking Calendar <= 1.4.01 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter4.3
- CVE-2026-48882WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability8.5
- CVE-2026-40791WordPress WP Time Slots Booking Form plugin <= 1.2.46 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-6810Booking Calendar Contact Form <= 1.2.63 - Authenticated (Subscriber+) Insecure Direct Object Reference to Calendar Takeover5.3
- CVE-2026-32483WordPress Contact Form Email plugin <= 1.3.63 - Broken Access Control vulnerability6.5
- CVE-2026-25465WordPress CP Multi View Event Calendar plugin <= 1.4.36 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2026-32432WordPress WP Time Slots Booking Form plugin <= 1.2.42 - Broken Access Control vulnerability5.3
- CVE-2026-32433WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability8.5