PT-2025-38859 · Codepeople · Calendar Event Multi View

Nabil Irawan · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58009

Positive Technologies (AI Summary)

CVSS v3.1

3.8

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions codepeople CP Multi View Event Calendar versions through 1.4.32

Description An authorization issue exists in codepeople CP Multi View Event Calendar due to incorrectly configured access control security levels. This allows for unauthorized access.

Recommendations Update codepeople CP Multi View Event Calendar to a version later than 1.4.32.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-58009

Affected Products

Calendar Event Multi View

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-58009 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/cp-multi-view-calendar/vulnerability/wordpress-cp-multi-view-event-calendar-plugin-1-4-32-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/cp-multi-view-calendar/vulnerability/wordpress-cp-multi-view-event-calendar-plugin-1-4-32-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255684936835113 · Twitter Post