Calculated fields form

This hub aggregates every CVE we track for Calculated fields form, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Calculated fields form.

• CVE-2026-3986Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings6.4Mar 13, 2026
• CVE-2026-25368WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability6.5Feb 19, 2026
• CVE-2025-49291WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability4.3Jun 6, 2025
• CVE-2024-13382Calculated Fields Form < 5.2.64 - Admin+ Stored XSS4.8May 15, 2025
• CVE-2024-13381Calculated Fields Form < 5.2.62 - Admin+ Stored XSS4.8May 1, 2025
• CVE-2024-12273Calculated Fields Form < 5.2.62 - Admin+ Stored XSS3.5Apr 29, 2025
• CVE-2024-12601Calculated Fields Form <= 5.2.63 - Denial of Service5.3Dec 17, 2024
• CVE-2024-9940Calculated Fields Form <= 5.2.45 - HTML Injection5.3Oct 17, 2024
• CVE-2023-26523WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability4.3Jun 3, 2024
• CVE-2024-29759WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability7.1Mar 27, 2024
• CVE-2024-2020Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting7.2Mar 13, 2024
• CVE-2024-0963Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Feb 2, 2024
• CVE-2023-0389Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields4.8Jan 16, 2024
• CVE-2023-6446Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting4.4Jan 11, 2024
• CVE-2023-51517WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection4.1Dec 29, 2023