RSVP and Event Management vulnerabilities

2 known vulnerabilities in RSVP and Event Management from WP Chill. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  RSVP and Event Management: Improper Neutralization of Input During Web Page Generation

  CVE-2026-121570Nov 9, 2026WP Chill

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill RSVP and Event Management rsvp allows Stored XSS.This issue affects RSVP and Event Management: from n/a through 2.7.17.

• 7.6 High severity

  RSVP and Event Management: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-24683Jan 24, 2025WP Chill

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through <= 2.7.14.