Every CVESearch/Get API key

CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows...

7.5 HighPublic exploit

CVE-2014-8586 is a high vulnerability (CVSS 7.5) in Cp Multi View Event Calendar Project Multi View Event Calendar, published November 4, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 40.1%, the 98th percentile. No source names a fixed version.

What does this mean?
Severity
7.5 HighCVSS 2.0, NVD
Exploit chance
40.1%EPSS, 98th percentile
Exploitation
None known2 public exploits
Fixed in
No fix listedNo source names one

Description

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Exploit likelihood

40.1%Down 26.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBWordPress Plugin CP Multi View Event Calendar 1.01 - SQL Injection2014-10-27
MetasploitWordPress CP Multi-View Calendar Unauthenticated SQL Injection Scanner2015-03-03

What each source reports

NVD Score used7.5

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Record
CVE-2014-8586
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
CVE ListNo score

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Record
CVE-2014-8586
Updated
2026-11-02
EUVDEUVD-2014-8423No score

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Record
EUVD-2014-8423
Updated
2026-11-03
GitHub AdvisoriesGHSA-h3cx-gfmj-vfwfNo score

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows...

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

Record
GHSA-h3cx-gfmj-vfwf
Weakness
CWE-89
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open