CodePeople · weakness class
SQL Injection
7 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.
- codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection
- SQL injection vulnerability in Music Store - WordPress eCommerce versions prior to 1.1.14 allows a remote authenticated attacker with an administrative privilege to execute arbitr…
- WordPress Form Builder CP Plugin <= 1.2.41 - SQL Injection vulnerability
- Form Builder CP <= 1.2.41 - Authenticated (Contributor+) SQL Injection
- WordPress WP Time Slots Booking Form plugin <= 1.2.50 - SQL Injection vulnerability
- WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
- WordPress CP Contact Form with Paypal plugin <= 1.3.61 - SQL Injection vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.