CVE-2024-50531

< 6.2.5

Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters

10.0CRITICAL

CVE-2023-25054

<= 10.6.6

Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: f

10.0CRITICAL

CVE-2023-41652

<= 10.6.6

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvp

8.2HIGH

CVE-2023-25047

<= 9.9.3

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvp

5.5MEDIUM

CVE-2023-25045

<= 9.9.3

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker allo

6.7MEDIUM

CVE-2023-27617

< 10.6.7

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.

5.9MEDIUM

CVE-2023-27616

< 10.6.7

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.

7.1HIGH

CVE-2023-29095

< 10.5.5

Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions.

7.6HIGH

CVE-2022-1768

<= 9.3.2

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterizatio

9.8CRITICAL

CVE-2022-1505

< 9.2.7

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization

9.8CRITICAL

CVE-2022-1453

< 9.2.6

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization

9.8CRITICAL

CVE-2021-24371

< 8.7.3

The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL

2.7LOW

CVE-2019-15646

< 6.2

The rsvpmaker plugin before 6.2 for WordPress has SQL injection.

9.8CRITICAL

CVE-2018-21004

< 5.6.4

The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.

9.8CRITICAL