CVE-2014-8586

HIGH 7.5CVE-2014-8586 · Published 04/11/2014 · updated 17/06/2026

Package	Affected versions	Patched versions
cp multi view event calendar cp_multi_view_event_calendar_project	`= 1.0.1`	No fix yet

Description

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

References

osvdb.org/show/osvdb/113670
packetstormsecurity.com/files/128814/WordPress-CP-Multi-View-Event-Calendar-1.01-SQL-Injection.html · Exploit
exploit-db.com/exploits/35073 · Exploit
securityfocus.com/bid/70718
exchange.xforce.ibmcloud.com/vulnerabilities/97766

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free