Carrcommunications Rsvpmaker
14 CVEs affecting Carrcommunications Rsvpmaker. Latest disclosed: 2024-11-04. Critical: 7, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-50531 | Critical | 10.0 | 2024-11-04 | Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to… |
CVE-2023-25054 | Critical | 10.0 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6. |
CVE-2022-1768 | Critical | 9.8 | 2022-06-13 | The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passe… |
CVE-2022-1505 | Critical | 9.8 | 2022-05-10 | The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed… |
CVE-2022-1453 | Critical | 9.8 | 2022-05-10 | The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed… |
CVE-2019-15646 | Critical | 9.8 | 2019-08-27 | The rsvpmaker plugin before 6.2 for WordPress has SQL injection. |
CVE-2018-21004 | Critical | 9.8 | 2019-08-27 | The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. |
CVE-2023-41652 | High | 8.2 | 2023-11-03 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.Th… |
CVE-2023-29095 | High | 7.6 | 2023-07-10 | Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions. |
CVE-2023-27616 | High | 7.1 | 2023-09-27 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. |
CVE-2023-25045 | Medium | 6.7 | 2023-10-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue a… |
CVE-2023-27617 | Medium | 5.9 | 2023-09-27 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. |
CVE-2023-25047 | Medium | 5.5 | 2023-10-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.Th… |
CVE-2021-24371 | Low | 2.7 | 2021-08-02 | The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, w… |