Carrcommunications

15 CVEs across 2 Carrcommunications products. Browse Carrcommunications vulnerabilities, severities, and proof-of-concept exploits.

Carrcommunications products with known CVEs

ProductCVEs
Rsvpmaker14
Rsvpmaker Excel1
Carrcommunications CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-50531Critical10.02024-11-04Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to…
CVE-2023-25054Critical10.02023-12-29Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6.
CVE-2023-41652High8.22023-11-03Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.Th…
CVE-2023-25047Medium5.52023-10-31Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.Th…
CVE-2023-25045Medium6.72023-10-31Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue a…
CVE-2023-27617Medium5.92023-09-27Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.
CVE-2023-27616High7.12023-09-27Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.
CVE-2023-29095High7.62023-07-10Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions.
CVE-2022-1768Critical9.82022-06-13The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passe…
CVE-2022-1505Critical9.82022-05-10The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed…
CVE-2022-1453Critical9.82022-05-10The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed…
CVE-2021-38337Medium6.12021-09-10The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/phpexcel/PHPExcel/S…
CVE-2021-24371Low2.72021-08-02The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, w…
CVE-2019-15646Critical9.82019-08-27The rsvpmaker plugin before 6.2 for WordPress has SQL injection.
CVE-2018-21004Critical9.82019-08-27The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.