CVE-2025-24683 WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through = 2.7.14...

CVE-2025-24683

CVE-2025-24683 concerns the WordPress plugin WPChill RSVP and Event Management . Public records state an SQL injection vulnerability due to improper neutralization of special elements in SQL commands, affecting the plugin versions “n/a through 2.7.14.” The root cause is a failure to properly sani...

WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

SQL Injection vulnerability discovered by AHMAD SOPYAN in WordPress Plugin RSVP and Event Management versions = 2.7.14...

CVE-2025-22714

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

CVE-2025-22714 WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

CVE-2025-22714 WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Reflected XSS.This issue affects Mobile DJ Manager: from n/a through = 1.7.5.6...

CVE-2025-22714

CVE-2025-22714 is a WordPress MDJM Event Management vulnerability: Reflected XSS in MDJM Event Management versions up to 1.7.5.5. Public docs list the affected product/version and state the issue is a Cross-Site Scripting in input handling during web page generation. The PT Security entry for thi...

PT-2025-4642 · Unknown · Mdjm Event Management

Name of the Vulnerable Software and Affected Versions: MDJM Event Management versions 1.7.5.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables an attacker to injec...

WordPress plugin MDJM Event Management 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

WordPress MDJM Event Management Plugin <= 1.7.5.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 Patchstack Alliance in WordPress Plugin Mobile DJ Manager versions = 1.7.5.6...

WordPress RSVP and Event Management plugin <= 2.7.13 - Missing Authorization vulnerability

Missing Authorization vulnerability discovered by Lucio Sá in WordPress Plugin RSVP and Event Management versions = 2.7.13...

CVE-2024-12711

CVE-2024-12711 affects the RSVP and Event Management WordPress plugin: a missing capability check on several AJAX functions (e.g., bulk_delete_attendees, bulk_delete_questions) in all versions up to 2.7.13 enables unauthorized access; unauthenticated attackers can delete questions/attendees and a...

WordPress plugin RSVP and Event Management 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

PT-2025-1933 · WordPress · Rsvp/Event Management Plugin For Wordpress

Name of the Vulnerable Software and Affected Versions: RSVP and Event Management plugin for WordPress versions up to, and including, 2.7.13 Description: The issue allows unauthorized access due to a missing capability check on several AJAX functions, such as bulk delete attendees and bulk delete...

CVE-2024-13007

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-13007

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-13007 Codezips Event Management System contact.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2024-13007

CVE-2024-13007 affects Codezips Event Management System 1.0, where an SQL injection can be triggered in the /contact.php file by manipulating the title argument. The vulnerability is network-exploitable and allows remote access with no user interaction required, as described in multiple sources. ...

CVE-2024-13007 Codezips Event Management System contact.php sql injection

A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

PT-2024-17867 · Unknown · Codezips Event Management System

Name of the Vulnerable Software and Affected Versions: Codezips Event Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /contact.php. The manipulation of the title argument leads to sql injection. It is possible to launc...