Skip to content
OpenAdvisories
High · 8.5 CVE-2026-109901 EUVD-2026-100895GHSA-q5hr-3xmq-gw74

WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability

Published Oct 14, 2026 · Updated Oct 14, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.

Affected products

VendorProductAffectedFixed
Codepeople CP Multi View Event Calendar ≤ 1.4.41 —

References