Codepeople Form Builder Cp — known CVE vulnerabilities

Every CVE whose affected-product data names Codepeople Form Builder Cp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-13680 — CVSS 6.5 (medium): The Form Builder CP plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'CP_EASY_FORM_WILL_APPEAR_HERE'…
• CVE-2022-2567 — CVSS 4.8 (medium): The Form Builder CP WordPress plugin before 1.2.32 does not sanitise and escape some of its form settings, which could allow high privilege…