169 matches found
PT-2026-20712
Missing Authorization vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculated Fields Form: from n/a through = 5.4.4.1...
WordPress plugin Calculated Fields Form 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...
WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by w41bu1 in WordPress Plugin Calculated Fields Form versions = 5.4.4.1...
WordPress Calculated Fields Form plugin < 5.2.62 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Calculated Fields Form versions 5.2.62...
EUVD-2020-28356
Malware in sbrugna...
EUVD-2025-17271
Malicious code in bioql PyPI...
EUVD-2024-26754
Malicious code in bioql PyPI...
EUVD-2023-56230
Malicious code in bioql PyPI...
EUVD-2023-30320
Malicious code in bioql PyPI...
CVE-2025-49291
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through = 5.3.58...
CVE-2025-49291
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form allows Cross Site Request Forgery. This issue affects Calculated Fields Form: from n/a through 5.3.58...
CVE-2025-49291
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through = 5.3.58...
CVE-2025-49291 WordPress Calculated Fields Form <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form allows Cross Site Request Forgery. This issue affects Calculated Fields Form: from n/a through 5.3.58...
CVE-2025-49291 WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through = 5.3.58...
CVE-2025-49291
CVE-2025-49291 is a CSRF vulnerability in Calculated Fields Form. The issue affects the plugin for WordPress versions from unspecified earliest up to v5.3.58. NVD’s entry lists a high base CVSS v3.1 of 8.8 (CONF: HIGH, IMPACT: HIGH) with attack vector NETWORK and user interaction REQUIRED, indica...
WordPress plugin Calculated Fields Form 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
PT-2025-24225 · Unknown · Calculated Fields Form
Name of the Vulnerable Software and Affected Versions: Calculated Fields Form versions 5.3.58 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the Calculated Fields Form, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 5.3.5...
CVE-2025-49291: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in codepeople Calculated Fields Form calculated-fields-form allows Cross Site Request Forgery.This issue affects Calculated Fields Form: from n/a through = 5.3.58...
CVE-2023-0389
The Calculated Fields Form WordPress plugin before 1.1.151 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite set...