3 matches found
CVE-2022-1505
The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated attackers to steal sensitive informati...
PT-2022-13920 · WordPress · Rsvpmaker
Name of the Vulnerable Software and Affected Versions: RSVPMaker plugin for WordPress versions up to and including 9.2.6 Description: The issue is related to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user-supplied data passed to a SQL query in the...
CVE-2022-1505: Improper Neutralization of Special Elements used in an SQL Command
The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated attackers to steal sensitive informati...