CVE-2026-109901
CVE-2026-109901 · WordPress CP Multi View Event Calendar plugin <= 1.4.41 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Injection.This issue affects CP Multi View Event Calendar : from n/a through 1.4.41.
CVSS 8.5 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
cp multi view event calendar
- Versions
- ≥ 0, ≤ 1.4.41: Affected; ≥ 1.4.42: Not affected (custom)
Update to 1.4.42