RSVPMaker vulnerabilities

3 known vulnerabilities in RSVPMaker from Davidfcarr. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  RSVPMaker: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-1768Jun 13, 2022DavidfcarrEPSS 12.9%

  The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possible for unauthenticat

• 7.5 High severity

  RSVPMaker: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-1505May 10, 2022DavidfcarrEPSS 1.9%

  The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated a

• 7.5 High severity

  RSVPMaker: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-1453May 10, 2022DavidfcarrEPSS 6.92%

  The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers