CVE-2023-41652

CVE-2023-41652 RSVPMarker = 10.6.6 - 未認証SQLインジェクション 説明: WordPress用プラグインRSVPMarkerは、バージョン10.6.6以前において、'email'パラメータを介したSQLインジェクションに対して脆弱です。ユーザーが指定したパラメータに対するエスケープ処理が不十分であり、既存のSQLクエリに対する十分な準備処理が欠如していることが原因です。この脆弱性により、認証されていない攻撃者が既存のクエリに追加のSQLクエリを付加し、データベースから機密情報を抽出することが可能になります。 root@kitploit:...

EUVD-2025-9449

Malicious code in bioql PyPI...

EUVD-2025-28194

Malicious code in bioql PyPI...

EUVD-2025-3804

Malicious code in bioql PyPI...

CVE-2025-24600

Missing Authorization vulnerability in davidfcarr RSVPMarker rsvpmaker.This issue affects RSVPMarker : from n/a through = 11.4.5...

CVE-2025-48278

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.5.6...

CVE-2025-48278

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.5.6...

CVE-2025-48278 WordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.5.6...

CVE-2025-48278

CVE-2025-48278 affects the WordPress RSVPMarker plugin (versions n/a through 11.5.6). The vulnerability is an SQL Injection caused by improper neutralization of special elements in SQL commands. The connected documents confirm the issue exists in RSVPMarker up to 11.5.6, with PatchStack and CVE r...

CVE-2025-48278 WordPress RSVPMarker <= 11.5.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker allows SQL Injection. This issue affects RSVPMarker : from n/a through 11.5.6...

PT-2025-21984 · David F. Carr · Rsvpmaker

Name of the Vulnerable Software and Affected Versions: davidfcarr RSVPMarker versions n/a through 11.5.6 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks, potentiall...

CVE-2025-48278: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.5.6...

WordPress plugin RSVPMarker SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2025-31552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

CVE-2025-31552

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

CVE-2025-31552

CVE-2025-31552 pertains to a SQL Injection vulnerability in the WordPress RSVPMarker plugin. Public docs consistently describe improper neutralization of special elements in SQL commands as the root cause, affecting RSVPMarker versions up to 11.4.8 (per NVD/RedHat/CVE listings) and, per PatchStac...

CVE-2025-31552 WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

CVE-2025-31552 WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

CVE-2025-31552: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through = 11.6.7...

PT-2025-14424 · Rsvpmaker · Rsvpmaker

Name of the Vulnerable Software and Affected Versions: RSVPMarker versions n/a through 11.4.8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...