Skip to content
OpenAdvisories
Low · 3.8 CVE-2025-58009 EUVD-2025-30621GHSA-86qm-87xg-g3cc

WordPress CP Multi View Event Calendar plugin <= 1.4.35 - Broken Access Control vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: codepeople Product: CP Multi View Event Calendar

Description

Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.35.

Affected products

VendorProductAffectedFixed
codepeople CP Multi View Event Calendar ≤ 1.4.35 —

References