Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-49291

Cross-Site Request Forgery (CSRF) vulnerability in codepeople Calculated Fields Form allows Cross Site Request Forgery. This issue affects Calculated Fields Form: from n/a through 5.3.58.

Published

2025-06-06T13:15:44.933

Last Modified

2025-07-02T20:02:18.077

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-352

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	codepeople	calculated_fields_form	< 5.3.59	Yes

References

https://patchstack.com/database/wordpress/plugin/calculated-fields-form/vulnerability/wordpress-calculated-fields-form-5-3-58-cross-site-request-forgery-csrf-vulnerability?_s_id=cve Third Party Advisory ([email protected])