Davidfcarr

12 CVEs across 6 Davidfcarr products. Browse Davidfcarr vulnerabilities, severities, and proof-of-concept exploits.

Davidfcarr products with known CVEs

ProductCVEs
Quick Playground3
Rsvpmaker3
Rsvpmarker3
My Marginalia1
Rsvpmaker For Toastmasters1
Rsvpmaker Volunteer Roles1
Davidfcarr CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2500Medium4.42026-06-06The Quick Playground plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.4. This is due to the `qckply_data()` funct…
CVE-2026-6403High7.52026-05-15The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3. This is due to insufficient path validation in…
CVE-2026-1830Critical9.82026-04-09The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient autho…
CVE-2025-48278High8.52025-05-19Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.Thi…
CVE-2025-39435High7.12025-04-17Cross-Site Request Forgery (CSRF) vulnerability in davidfcarr My Marginalia my-marginalia allows Stored XSS.This issue affects My Marginalia: from n/a through…
CVE-2025-31552Critical9.32025-04-01Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.Thi…
CVE-2025-24600Medium5.32025-01-27Missing Authorization vulnerability in davidfcarr RSVPMarker rsvpmaker.This issue affects RSVPMarker : from n/a through <= 11.4.5.
CVE-2025-23531High7.12025-01-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in davidfcarr RSVPMaker Volunteer Roles rsvpmaker-volunteer-…
CVE-2024-50531Critical10.02024-11-04Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmasters allows Upload a Web Shell to…
CVE-2022-1768Critical9.82022-06-13The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passe…
CVE-2022-1505Critical9.82022-05-10The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed…
CVE-2022-1453Critical9.82022-05-10The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed…