High · 7.6 CVE-2025-24683 EUVD-2025-3877GHSA-c63w-gjxf-c2hv

WordPress RSVP and Event Management Plugin <= 2.7.14 - SQL Injection vulnerability

Published Jan 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP Chill Product: RSVP and Event Management

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through <= 2.7.14.

Affected products

Vendor	Product	Affected	Fixed
WP Chill	RSVP and Event Management	≤ 2.7.14	—

References

https://patchstack.com/database/Wordpress/Plugin/rsvp/vulnerability/wordpress-rsvp-and-event-management-plugin-2-7-14-sql-injection-vulnerability?_s_id=cve vdb-entry