Skip to content
OpenAdvisories

Vendor

davidfcarr

12 known vulnerabilities.

Products

Quick Playground 3 RSVPMaker 3 RSVPMarker 3 RSVPMaker Volunteer Roles 1 RSVPMaker for Toastmasters 1 My Marginalia 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-1830 Public exploit

    Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload

    The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This…

    davidfcarr Quick Playground Web / CMS