Vulnerabilities / CP Multi View Events Calendar
CP Multi View Events Calendar vulnerabilities
Advisories WPSec published for CP Multi View Events Calendar. Other sources may list more. Its attack surface: CP Multi View Events Calendar on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-16 | WPSEC-2026-1106 | CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via Event Title | Medium 5.4 | 1.4.43 |
| 2026-10-14 | WPSEC-2026-0961 | CP Multi View Event Calendar <= 1.4.41 - Missing Authorization to Authenticated (Contributor+) Calendar View Modification and Event Deletion | Medium 5.4 | 1.4.42 |
| 2026-10-14 | WPSEC-2026-0960 | CP Multi View Event Calendar <= 1.4.41 - Authenticated (Contributor+) SQL Injection via 'params' Parameter | Medium 6.5 | 1.4.42 |
License: CC BY 4.0