PatchTheCVEcalculated fields form vulnerabilities and fixes
Recent CVEs affecting calculated fields form, with upgrade or downgrade steps. 10 tracked.
Also searched as: calculatedfieldsform.
calculated fields form has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-06-06. Highest priority: CVE-2024-2020 (score 42/100).
- CVE-2025-49291 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form calculated-fields-form al
- CVE-2024-9940 MEDIUM 5.3 UPGRADE The Calculated Fields Form plugin for WordPress is vulnerable to HTML Injection in all versions up to, and inc
- CVE-2024-2020 HIGH 7.2 UPGRADE The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page
- CVE-2024-29759 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodePeop
- CVE-2024-13382 MEDIUM 4.8 UPGRADE The Calculated Fields Form WordPress plugin before 5.2.64 does not sanitise and escape some of its settings, w
- CVE-2024-13381 MEDIUM 4.8 UPGRADE The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, w
- CVE-2024-12601 MEDIUM 5.3 UPGRADE The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and
- CVE-2024-12273 LOW 3.5 UPGRADE The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, w
- CVE-2024-0963 MEDIUM 6.4 UPGRADE The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's
- CVE-2023-26523 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issu
FAQ
How do I fix calculated fields form vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is calculated fields form being exploited right now?
None of the tracked calculated fields form CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which calculated fields form CVE should I patch first?
CVE-2024-2020 currently ranks highest (42/100): The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form page.