CVE-2023-26523

MEDIUM 4.3CVE-2023-26523 · Published 03/06/2024 · updated 17/06/2026

In short

CVE-2023-26523 is a MEDIUM (CVSS 4.3) vulnerability affecting calculated fields form (codepeople).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 24.3% of all vulnerabilities.
Fix: update to 1.1.121 or later.

Package	Affected versions	Patched versions
calculated fields form codepeople	`< 1.1.121`	`1.1.121`

Description

Missing Authorization vulnerability in CodePeople Calculated Fields Form allows Functionality Misuse.This issue affects Calculated Fields Form: from n/a through 1.1.120.

References

patchstack.com/database/vulnerability/calculated-fields-form/wordpress-calculated-fields-form-plugin-1-1-120-missing-authorization-leading-to-feedback-submission-vulnerability · Third Party Advisory

More vulnerabilities in calculated fields form

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

calculated fields form

codepeople

< 1.1.121

1.1.121

More vulnerabilities in calculated fields form

See all →