Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.8

CP Multi View Event Calendar: Unauthorized Access to Events

CVE-2025-58009 · published 1 year ago
Summary

An error in the CP Multi View Event Calendar software allows unauthorized users to access event information, potentially leading to sensitive data exposure. This issue affects versions 1.0 through 1.4.32. To protect your calendar data, update to a patched version of the software or install a fix provided by the developer.

Original advisory text
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP ...
Missing Authorization vulnerability in codepeople CP Multi View Event Calendar cp-multi-view-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CP Multi View Event Calendar : from n/a through <= 1.4.35.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.8 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published22 Sep 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-58009 · NVD
Track software like this
Free during beta