Skip to content
Noroxi

codepeople records

64 published records for vendor codepeople.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
48.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

64 records
  • CVE-2016-10916
    40Plan

    The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319.

    CriticalCVSS 9.8No exploitEPSS 2%

    codepeople · appointment booking calendarAug 22, 2019

  • CVE-2016-10909
    40Plan

    The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.

    CriticalCVSS 9.8No exploitEPSS 2%

    codepeople · booking calendar contact formAug 21, 2019

  • CVE-2015-10099
    39Monitor

    CP Appointment Calendar Plugin dex_appointments.php dex_process_ready_to_go_appointment sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    codepeople · cp appointment calendarApr 10, 2023

  • CVE-2014-125091
    39Monitor

    codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    codepeople · polls cpMar 4, 2023

  • CVE-2024-35735
    39Monitor

    WordPress WP Time Slots Booking Form plugin <= 1.2.11 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    codepeople · wp time slots booking formJun 10, 2024

  • CVE-2025-46247
    39Monitor

    WordPress Appointment Booking Calendar plugin <= 1.3.92 - Broken Access Control Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    codepeople · appointment booking calendarApr 22, 2025

  • CVE-2015-9233
    35Monitor

    The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to

    HighCVSS 8.8No exploitEPSS 1%

    codepeople · cp contact form with paypalSep 29, 2017

  • CVE-2018-20964
    35Monitor

    The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF.

    HighCVSS 8.8No exploitEPSS 1%

    codepeople · contact form emailAug 13, 2019

  • CVE-2022-43482
    35Monitor

    WordPress Appointment Booking Calendar plugin <= 1.3.69 - Missing Authorization vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    codepeople · appointment booking calendarNov 18, 2022

  • CVE-2023-25039
    35Monitor

    WordPress Google Maps CP plugin <= 1.0.43 - Missing Authorization Leading To Feedback Submission Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    codepeople · google maps cpMar 25, 2024

  • CVE-2022-41790
    35Monitor

    WordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control

    HighCVSS 8.8No exploitEPSS 0%

    codepeople · wp time slots booking formJan 17, 2024

  • CVE-2024-0856
    35Monitor

    Booking Calendar < 1.3.83 - CSRF appointment scheduling

    HighCVSS 8.8No exploitEPSS 0%

    codepeople · appointment booking calendarMar 20, 2024

  • CVE-2023-27460
    35Monitor

    WordPress CP Contact Form with PayPal plugin <= 1.3.34 - Missing Authorization Leading To Feedback Submission vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    codepeople · cp contact form with paypalJun 3, 2024

  • CVE-2025-46241
    35Monitor

    WordPress Appointment Booking Calendar plugin <= 1.3.92 - CSRF to SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    codepeople · appointment booking calendarApr 22, 2025

  • CVE-2025-49291
    35Monitor

    WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    codepeople · calculated fields formJun 6, 2025

  • CVE-2020-9372
    34Monitor

    The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking

    HighCVSS 7.8Proof of conceptEPSS 9%

    codepeople · appointment booking calendarMar 4, 2020

  • CVE-2015-7319
    31Monitor

    SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 fo

    HighCVSS 7.5No exploitEPSS 2%

    codepeople · appointment booking calendarSep 29, 2015

  • CVE-2015-9348
    31Monitor

    The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.

    HighCVSS 7.5No exploitEPSS 2%

    codepeople · sell downloadsAug 27, 2019

  • CVE-2024-12274
    30Monitor

    BookingPress < 1.1.23 - Unauthenticated Export File Download

    HighCVSS 7.5No exploitEPSS 1%

    codepeople · appointment booking calendarJan 13, 2025

  • CVE-2024-33543
    30Monitor

    WordPress WP Time Slots Booking Form plugin <= 1.2.06 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    codepeople · wp time slots booking formJun 9, 2024

  • CVE-2023-23895
    28Monitor

    WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability

    HighCVSS 7.2No exploitEPSS 1%

    codepeople · wp time slots booking formDec 9, 2024

  • CVE-2024-3632
    27Monitor

    Smart Image Gallery < 1.0.19 - Update/Delete Google API Key via CSRF

    MediumCVSS 6.8No exploitEPSS 0%

    codepeople · smart image galleryJul 13, 2024

  • CVE-2024-36082
    26Monitor

    SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an adm

    MediumCVSS 6.5No exploitEPSS 1%

    codepeople · music storeJun 7, 2024

  • CVE-2024-13680
    26Monitor

    Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection

    MediumCVSS 6.5No exploitEPSS 0%

    codepeople · form builder cpJan 24, 2025

  • CVE-2023-48318
    26Monitor

    WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability

    MediumCVSS 6.5No exploitEPSS 0%

    codepeople · contact form emailJun 4, 2024