WordPress RSVP and Event Management <2.7.8 - Missing Authorization Detection

WordPress RSVP and Event Management plugin before 2.7.8 is susceptible to missing authorization. The plugin does not have any authorization checks when exporting its entries, and the export function is hooked to the init action. An attacker can potentially retrieve sensitive information such as...

EUVD-2026-20191

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through = 2.7.16...

CVE-2026-39536 WordPress RSVP and Event Management plugin <= 2.7.16 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows Retrieve Embedded Sensitive Data.This issue affects RSVP and Event Management: from n/a through = 2.7.16...

EUVD-2024-51066

Malicious code in bioql PyPI...

CVE-2025-24683

CVE-2025-24683 concerns the WordPress plugin WPChill RSVP and Event Management . Public records state an SQL injection vulnerability due to improper neutralization of special elements in SQL commands, affecting the plugin versions “n/a through 2.7.14.” The root cause is a failure to properly sani...

WordPress RSVP ME Plugin <= 1.9.9 is vulnerable to SQL Injection

Software RSVP ME Type Plugin Vulnerable versions = 1.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50544 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 1e22cf9c262a Credits LVT-tholv2k Required privilege Contributor Published 31...

CVE-2024-50491 WordPress RSVP ME plugin <= 1.9.9 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through = 1.9.9...

WordPress RSVP ME Plugin <= 1.9.9 is vulnerable to SQL Injection

Software RSVP ME Type Plugin Vulnerable versions = 1.9.9 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50491 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID c4aa990dd57c Credits LVT-tholv2k Required privilege Unauthenticated Published ...

PT-2019-8497

Name of the Vulnerable Software and Affected Versions WordPress rsvp plugin versions prior to 2.3.8 Description The issue allows for persistent XSS via the note field on the attendee-list screen. Recommendations For versions prior to 2.3.8, update to version 2.3.8 or later to resolve the issue...