Calculated Fields Form

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These can be exploited by an authentic…CVE-2020-7228Codepeople · 1.0% likely

   CWE-79

2. Calculated Fields Form <= 5.2.63 - Denial of ServiceCVE-2024-12601codepeople · CVSS 5.3 · 0.6% likely

   CWE-400

3. Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-2020codepeople · CVSS 7.2 · 0.6% likely

   CWE-79

4. Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-0963codepeople · CVSS 6.4 · 0.5% likely

   CWE-79

5. Calculated Fields Form < 1.1.151 - Admin+ Stored Cross-Site Scripting via Dropdown FieldsCVE-2023-0389Codepeople · CVSS 4.8 · 0.5% likely

   CWE-79

6. WordPress Calculated Fields Form plugin <= 1.2.54 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-29759CodePeople · CVSS 7.1 · 0.4% likely

   CWE-79

7. Calculated Fields Form <= 5.2.45 - HTML InjectionCVE-2024-9940codepeople · CVSS 5.3 · 0.4% likely

   CWE-75

8. Calculated Fields Form < 5.2.64 - Admin+ Stored XSSCVE-2024-13382Codepeople · CVSS 4.8 · 0.3% likely

   CWE-79

9. WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission VulnerabilityCVE-2023-26523CodePeople · CVSS 4.3 · 0.3% likely

   CWE-862

10. Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-6446codepeople · CVSS 4.4 · 0.3% likely

    CWE-87

11. WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open RedirectionCVE-2023-51517CodePeople · CVSS 4.1 · 0.3% likely

    CWE-601

12. WordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerabilityCVE-2026-25368codepeople · CVSS 6.5 · 0.3% likely

    CWE-862

13. Calculated Fields Form < 5.2.62 - Admin+ Stored XSSCVE-2024-13381Codepeople · CVSS 3.5 · 0.3% likely

    CWE-79

14. Calculated Fields Form < 5.2.62 - Admin+ Stored XSSCVE-2024-12273Codepeople · CVSS 3.5 · 0.3% likely

    CWE-79

15. Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form SettingsCVE-2026-3986codepeople · CVSS 6.4 · 0.3% likely

    CWE-79

16. WordPress Calculated Fields Form plugin <= 5.5.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-95529codepeople · CVSS 7.1 · 0.3% likely

    CWE-79

17. WordPress Calculated Fields Form plugin <= 5.5.2.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-124253codepeople · CVSS 7.1 · 0.2% likely

    CWE-79

18. WordPress Calculated Fields Form plugin <= 5.3.58 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-49291codepeople · CVSS 4.3 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.