Codepeople
Page 2 of 2 — Codepeople CVEs from a corpus of 118, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10992 | Medium | 6.1 | 2019-09-17 | The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter. |
CVE-2015-9348 | High | 7.5 | 2019-08-27 | The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs. |
CVE-2015-9346 | Medium | 6.1 | 2019-08-27 | The cp-polls plugin before 1.0.5 for WordPress has XSS. |
CVE-2014-10395 | Medium | 6.1 | 2019-08-27 | The cp-polls plugin before 1.0.1 for WordPress has XSS in the votes list. |
CVE-2016-10916 | Critical | 9.8 | 2019-08-22 | The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319. |
CVE-2016-10909 | Critical | 9.8 | 2019-08-21 | The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection. |
CVE-2016-10908 | Medium | 6.1 | 2019-08-21 | The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS. |
CVE-2019-14784 | Medium | 6.1 | 2019-08-15 | The "CP Contact Form with PayPal" plugin before 1.2.98 for WordPress has XSS in CSS edition. |
CVE-2018-20964 | High | 8.8 | 2019-08-13 | The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF. |
CVE-2018-20963 | Medium | 6.1 | 2019-08-13 | The contact-form-to-email plugin before 1.2.66 for WordPress has XSS. |
CVE-2019-14791 | Medium | 6.1 | 2019-08-09 | The Appointment Booking Calendar plugin 1.3.18 for WordPress allows XSS via the wp-admin/admin-post.php editionarea parameter. |
CVE-2019-14785 | Medium | 5.4 | 2019-08-09 | The "CP Contact Form with PayPal" plugin before 1.2.99 for WordPress has XSS in the publishing wizard via the wp-admin/admin.php?page=cp_contact_form_paypal.ph… |
CVE-2019-9646 | Medium | 6.1 | 2019-03-10 | The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition ar… |
CVE-2015-7666 | Medium | 6.1 | 2017-12-27 | Multiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2) cp_deleteMessageItem functions in cp_ppp_admin_int_message_list.inc… |
CVE-2015-9233 | High | 8.8 | 2017-09-30 | The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.ph… |
CVE-2015-7320 | | 2015-09-29 | Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calendar plugin before 1.1… | |
CVE-2015-7319 | | 2015-09-29 | SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows… | |
CVE-2013-5953 | | 2014-03-19 | Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5… |