Skip to content
OpenAdvisories

Vendor

davidfcarr

12 known vulnerabilities.

Products

Quick Playground 3 RSVPMaker 3 RSVPMarker 3 RSVPMaker Volunteer Roles 1 RSVPMaker for Toastmasters 1 My Marginalia 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-2500

    Quick Playground <= 1.3.4 - Authenticated (Administrator+) Arbitrary File Read via 'filename' Parameter

    The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the `qckply_data()` function passing the user-supplied `filename` POST parameter directly to `file_get_contents()` without an…

    davidfcarr Quick Playground Web / CMS
  • Medium 5.3
    CVE-2025-24600

    WordPress RSVPMaker plugin <= 11.4.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in davidfcarr RSVPMarker rsvpmaker.This issue affects RSVPMarker : from n/a through <= 11.4.5.

    davidfcarr RSVPMarker