Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Rsvpmaker
(Carrcommunications)Repositories |
Unknown: This might be proprietary software. |
#Vulnerabilities | 14 |
Date | Id | Summary | Products | Score | Patch | Annotated |
---|---|---|---|---|---|---|
2023-07-10 | CVE-2023-29095 | Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions. | Rsvpmaker | 7.2 | ||
2023-09-27 | CVE-2023-27616 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. | Rsvpmaker | 6.1 | ||
2023-09-27 | CVE-2023-27617 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. | Rsvpmaker | 4.8 | ||
2023-10-31 | CVE-2023-25045 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3. | Rsvpmaker | 7.2 | ||
2023-10-31 | CVE-2023-25047 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 9.9.3. | Rsvpmaker | 7.2 | ||
2023-11-03 | CVE-2023-41652 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6. | Rsvpmaker | 9.8 | ||
2023-12-29 | CVE-2023-25054 | Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6. | Rsvpmaker | 9.8 | ||
2024-11-04 | CVE-2024-50531 | Unrestricted Upload of File with Dangerous Type vulnerability in David F. Carr RSVPMaker for Toastmasters allows Upload a Web Shell to a Web Server.This issue affects RSVPMaker for Toastmasters: from n/a through 6.2.4. | Rsvpmaker | 9.8 | ||
2019-08-27 | CVE-2018-21004 | The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. | Rsvpmaker | 9.8 | ||
2019-08-27 | CVE-2019-15646 | The rsvpmaker plugin before 6.2 for WordPress has SQL injection. | Rsvpmaker | 9.8 |