Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Calculated Fields Form — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Calculated Fields Form, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known security vulnerabilities and weaknesses associated with the Calculated Fields Form WordPress plugin. It aggregates data related to Common Weakness Enumerations (CWE) impacting this specific software component. The collection includes various security flaws such as Cross-Site Scripting (XSS), insecure direct object references, and improper access control mechanisms that have been publicly disclosed or identified by researchers. The information covers reported incidents and advisories from the plugin’s inception through the present day, providing a comprehensive historical record. Here, users can track the vendor’s security response timeline and understand how specific weakness classes have manifested in this particular product. Visitors can look up the full vulnerability history to assess the long-term security posture of the Calculated Fields Form. This resource serves as a neutral reference point for developers, security analysts, and site administrators who need to evaluate risks associated with this widely used form builder. By consolidating these reports, the page helps in understanding the evolution of security issues within the plugin’s codebase over time. It does not provide recommendations or mitigation strategies but rather presents factual records of identified flaws. The data is organized to facilitate easy searchability and cross-referencing with other known vulnerability databases. This approach ensures transparency regarding the security landscape surrounding Calculated Fields Form.

Vendor: CodePeople

CVE ID Title CVSS Severity Published
CVE-2026-3986 Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings CWE-79 6.4 Medium 2026-03-13
CVE-2026-25368 WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerability CWE-862 6.5 Medium 2026-02-19
CVE-2025-49291 WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 4.3 Medium 2025-06-06
CVE-2024-13382 Calculated Fields Form < 5.2.64 - Admin+ Stored XSS 4.8AI Medium AI 2025-05-15
CVE-2024-13381 Calculated Fields Form < 5.2.62 - Admin+ Stored XSS 4.8AI Medium AI 2025-05-01
CVE-2024-12273 Calculated Fields Form < 5.2.62 - Admin+ Stored XSS 4.8AI Medium AI 2025-04-29
CVE-2024-12601 Calculated Fields Form <= 5.2.63 - Denial of Service CWE-400 5.3 Medium 2024-12-17
CVE-2024-9940 Calculated Fields Form <= 5.2.45 - HTML Injection CWE-75 5.3 Medium 2024-10-17
CVE-2023-26523 WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability CWE-862 4.3 Medium 2024-06-03
CVE-2024-29759 WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-27
CVE-2024-2020 Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High 2024-03-13
CVE-2024-0963 Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-02-02
CVE-2023-0389 Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown Fields 4.8AI Medium AI 2024-01-16
CVE-2023-6446 Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-87 4.4 Medium 2024-01-11
CVE-2023-51517 WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open Redirection CWE-601 4.1 Medium 2023-12-29

All 15 known CVE vulnerabilities affecting Calculated Fields Form with full Chinese analysis, references, and POCs where available.