CVE-2022-1505

The RSVPMaker WordPress plugin has an unauthenticated SQL Injection in rsvpmaker-api-endpoints.php (and related ~rsvpmaker-email.php) due to insufficient escaping/parameterization. Affects versions up to 9.2.6 per CVE-2022-1505; impact is disclosure of database data. Connected sources reiterate t...

CVE-2022-1453

The RSVPMaker WordPress plugin is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization in user-supplied data passed to a SQL query in rsvpmaker-util.php. This affects versions up to and including 9.2.5. Multiple connected sources confirm the flaw and its im...

CVE-2022-1768

WordPress RSVPMaker plugin =9.3.3 and review database permissions to limit potential impact until patching is complete.

CVE-2023-25054

CVE-2023-25054 affects RSVPMaker for WordPress (vulnerable:

CVE-2024-50531

The CVE-2024-50531 entry concerns RSVPMaker for Toastmasters (WordPress plugin). Connected sources confirm an Unrestricted Upload of File with Dangerous Type vulnerability in RSVPMaker for Toastmasters, affecting versions up to 6.2.4, with unauthenticated attackers able to upload a web shell to t...

CVE-2018-21004

The CVE-2018-21004 entry concerns the WordPress RSVPMaker plugin, pre-5.6.4, containing a SQL injection vulnerability in its code path. Affected component: RSVPMaker plugin for WordPress. Root cause: improper handling of user-supplied input in SQL construction, enabling arbitrary SQL execution. I...

CVE-2023-25045

CVE-2023-25045 concerns the WordPress RSVPMaker plugin (

CVE-2023-41652

RSVPMaker for WordPress (plugin)

CVE-2021-24371

CVE-2021-24371 affects the RSVPMaker WordPress plugin prior to version 8.7.3. The Import feature at /wp-admin/tools.php?page=rsvpmaker_export_screen takes a user-supplied URL and invokes curl without validating that the URL is remote, enabling SSRF. This could allow a high-privilege admin to scan...

CVE-2019-15646

CVE-2019-15646 examines the RSVPMaker WordPress plugin. The connected documents confirm a SQL injection vulnerability in RSVPMaker versions prior to 6.2, arising from the plugin’s handling of input in its database queries. Impact, as stated, includes exposure to confidential data via unauthorized...

CVE-2023-27617

CVE-2023-27617 corresponds to a Stored XSS vulnerability in the WordPress RSVPMaker plugin, affecting versions up to 10.6.6 with admin+ authentication. Multiple sources (NVD, Red Hat, Patchstack, CVE records) confirm that the issue exists under privileged admin conditions and can lead to script i...

CVE-2023-29095

The CVE-2023-29095 entry concerns the RSVPMaker WordPress plugin by David F. Carr. Affected versions are prior to 10.5.5 and the vulnerability is an SQL Injection in the RSVPMaker plugin that can be exploited with Administrator+ privileges. The issue is addressed in version 10.5.5 and later, whic...

CVE-2023-27616

CVE-2023-27616 concerns the WordPress RSVPMaker plugin. Connected data confirms an unauthenticated stored XSS vulnerability in RSVPMaker versions <= 10.6.6, with CVE-2023-27616. The issue stems from inadequate escaping/validation, enabling a malicious user to inject script that could be stored...

CVE-2023-25047

The CVE-2023-25047 entry covers a SQL Injection vulnerability in the WordPress RSVPMaker plugin up to version 9.9.3, caused by improper neutralization of special elements in SQL commands. Public sources (NVD/Wordfence) indicate exploitable under authenticated admin+ context via the delete paramet...