WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in CP Multi View Events Calendar

A powerful and flexible WordPress event calendar plugin that lets you display your events in multiple calendar views, just like Google Calendar.

4Reported vulnerabilities
6.4Highest CVSS score
1.4.39Latest version
900+Active installs

What to do now

Update CP Multi View Events Calendar to 1.4.37 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.1 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2026-25465 Medium 6.4 0.2% 1.4.34 and earlier — March 17, 2026
CVE-2023-28492 Medium 4.3 0.3% 1.4.10 and earlier 1.4.11 March 16, 2023
CVE-2025-58009 Low 3.8 0.3% 1.4.36 and earlier 1.4.37 September 22, 2025
CVE-2023-23814 Low 3.8 0.5% 1.4.13 and earlier 1.4.15 February 20, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.