Skip to content
OpenAdvisories

Vendor

davidfcarr

12 known vulnerabilities.

Products

Quick Playground 3 RSVPMaker 3 RSVPMarker 3 RSVPMaker Volunteer Roles 1 RSVPMaker for Toastmasters 1 My Marginalia 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-6403

    Quick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter

    The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3. This is due to insufficient path validation in the qckply_zip_theme() function, which appends a user-controlled 'stylesheet' parameter directly to…

    davidfcarr Quick Playground Web / CMS
  • High 8.5
    CVE-2025-48278

    WordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMarker : from n/a through <= 11.5.6.

    davidfcarr RSVPMarker
  • High 7.1
    CVE-2025-39435

    WordPress My Marginalia plugin <= 1.0.6 - CSRF to Stored XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in davidfcarr My Marginalia my-marginalia allows Stored XSS.This issue affects My Marginalia: from n/a through <= 1.0.6.

    davidfcarr My Marginalia
  • High 7.1
    CVE-2025-23531

    WordPress RSVPMaker Volunteer Roles plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in davidfcarr RSVPMaker Volunteer Roles rsvpmaker-volunteer-roles allows Reflected XSS.This issue affects RSVPMaker Volunteer Roles: from n/a through <= 1.5.1.

    davidfcarr RSVPMaker Volunteer Roles