238 matches found
CVE-2024-24873 WordPress Polls CP plugin <= 1.0.71 - Polls Limitation Bypass vulnerability
: Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls allows Flooding.This issue affects CP Polls: from n/a through 1.0.71...
CVE-2024-24874 WordPress Polls CP plugin <= 1.0.71 - Content Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in CodePeople CP Polls allows Code Injection.This issue affects CP Polls: from n/a through 1.0.71...
PT-2024-20630 · Codepeople · Codepeople Cp Polls
Name of the Vulnerable Software and Affected Versions: CodePeople CP Polls versions 1.0.71 and earlier Description: The issue is related to an Improper Neutralization of Script-Related HTML Tags in a Web Page, also known as Basic XSS, which allows Code Injection. This means that an attacker could...
PT-2024-20629 · Codepeople · Codepeople Cp Polls
Name of the Vulnerable Software and Affected Versions: CodePeople CP Polls versions 1.0.71 and earlier Description: The issue is related to an Improper Control of Interaction Frequency vulnerability in CodePeople CP Polls, which allows Flooding. Recommendations: For versions 1.0.71 and earlier,...
CVE-2024-31941
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3...
CVE-2024-31941
CVE-2024-31941 affects the WordPress CP Media Player plugin (versions ≤ 1.1.3). The vulnerability is a Cross-Site Request Forgery (CSRF) flaw, with unauthenticated exploitation potential as described by Patchstack; advisory notes indicate the issue has low severity (CVSS v3.1 base score 5.4) and ...
CVE-2024-31941 WordPress CP Media Player plugin <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in CodePeople CP Media Player.This issue affects CP Media Player: from n/a through 1.1.3...
CVE-2024-31302
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...
CVE-2024-31302
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...
CVE-2024-31302 WordPress Contact Form Email plugin <= 1.3.44 - Sensitive Data Exposure vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodePeople Contact Form Email.This issue affects Contact Form Email: from n/a through 1.3.44...
CVE-2024-31302
CVE-2024-31302 affects the Contact Form Email plugin by CodePeople for WordPress. The vulnerability is described as an unauthenticated exposure of sensitive information via the plugin’s Contact Form Email feature, impacting versions from n/a up to 1.3.44. Public records in this set indicate an In...
PT-2024-23950 · Unknown · Codepeople Contact Form Email
Name of the Vulnerable Software and Affected Versions: CodePeople Contact Form Email versions 1.3.44 and earlier Description: The issue is related to the exposure of sensitive information to an unauthorized actor. This is a problem where sensitive data is made accessible to individuals who should...
CVE-2024-29759
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects Calculated Fields Form: from n/a through 1.2.54...
CVE-2024-29759
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodePeople Calculated Fields Form allows Reflected XSS.This issue affects Calculated Fields Form: from n/a through 1.2.54...
CVE-2024-29759
CVE-2024-29759 affects WordPress plugin Calculated Fields Form (CodePeople). Affected versions: up to 1.2.54. Root cause: improper neutralization of input during web page generation, enabling Reflected XSS. Public exploit details are not provided in the connected documents. No remediation details...
CVE-2023-25039
Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...
CVE-2023-25039
Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43...
PT-2024-12043 · Codepeople · Codepeople Google Maps Cp
Name of the Vulnerable Software and Affected Versions: CodePeople Google Maps CP versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability in CodePeople Google Maps CP. This vulnerability affects the software by not properly checking authorization,...
CVE-2022-41790
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76...
CVE-2022-41790
Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form.This issue affects WP Time Slots Booking Form: from n/a through 1.1.76...