WordPress security by component
RSVP and Event Management
Plugin description
RSVP and Event Management is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published May 25, 2026; the highest CVE/CNA score is 7.6.
Plugin slug:
rsvpLatest vulnerability
CVE-2026-27398: RSVP and Event Management: A security weakness
RSVP and Event Management is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.7.16.
| Safe version |
|
||
|---|---|---|---|
| May 25, 2026 |
CVE-2026-27398
RSVP and Event Management: A security weakness
RSVP and Event Management is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.7.16.
|
2.7.17 |
CVE5.3
NVDPending
|
| Apr 08, 2026 |
CVE-2026-39536
RSVP and Event Management: A security weakness
RSVP and Event Management is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.7.16.
|
2.7.17 |
CVE5.3
NVDPending
|
| Jan 24, 2025 |
CVE-2025-24683
RSVP and Event Management: SQL injection
RSVP and Event Management is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE7.6
NVDPending
|
| Aug 21, 2019 |
CVE-2017-18563
Rsvp: Cross-site scripting
Rsvp is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|