Skip to content
OpenAdvisories

Product · David F. Carr

RSVPMaker

10 known vulnerabilities.

3 results · Clear filters · Feed

  • High 8.2
    CVE-2023-41652 Public exploit

    WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.

  • High 7.1

    WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.

  • High 7.6

    WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection

    Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions.