← WordPress Vulnerabilities
WordPress security by component

RSVPMarker

RSVPMarker is a WordPress component with 17 published CVE records in this archive. The latest tracked vulnerability was published May 19, 2025; the highest CVE/CNA score is 10.

Plugin slug: rsvpmaker

CVE-2025-48278: RSVPMarker: SQL injection

RSVPMarker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedMay 19, 2025
Safe version guidanceSee mitigation notes
Safe version
May 19, 2025 CVE-2025-48278
RSVPMarker: SQL injection
RSVPMarker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.5
NVDPending
Apr 01, 2025 CVE-2025-31552
RSVPMarker: SQL injection
RSVPMarker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.3
NVDPending
Jan 27, 2025 CVE-2025-24600
RSVPMarker: A security weakness
RSVPMarker is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Nov 04, 2024 CVE-2024-50531
RSVPMaker for Toastmasters: Dangerous file upload
RSVPMaker for Toastmasters is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE10.0
NVD9.8
Dec 29, 2023 CVE-2023-25054
RSVPMaker: Code execution
RSVPMaker is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE10.0
NVD9.8
Nov 03, 2023 CVE-2023-41652
RSVPMaker: SQL injection
RSVPMaker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.2
NVD9.8
Oct 31, 2023 CVE-2023-25047
RSVPMaker: SQL injection
RSVPMaker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE5.5
NVD7.2
Oct 31, 2023 CVE-2023-25045
RSVPMaker: SQL injection
RSVPMaker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.7
NVD7.2
Sep 27, 2023 CVE-2023-27617
Rsvpmaker: Cross-site scripting
Rsvpmaker is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.9
NVD4.8
Sep 27, 2023 CVE-2023-27616
Rsvpmaker: Cross-site scripting
Rsvpmaker is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVD6.1
Jul 10, 2023 CVE-2023-29095
Rsvpmaker: SQL injection
Rsvpmaker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.6
NVD7.2
Jun 13, 2022 CVE-2022-1768
RSVPMaker: SQL injection
RSVPMaker is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD7.5
May 10, 2022 CVE-2022-1505
RSVPMaker: SQL injection
RSVPMaker is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD7.5
May 10, 2022 CVE-2022-1453
RSVPMaker: SQL injection
RSVPMaker is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD7.5
Aug 02, 2021 CVE-2021-24371
Import feature of the RSVPMaker: Server-side request forgery
Import feature of the RSVPMaker is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
See mitigation notes
CVE2.7
NVD2.7
Aug 27, 2019 CVE-2019-15646
Rsvpmaker: SQL injection
Rsvpmaker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8
Aug 27, 2019 CVE-2018-21004
Rsvpmaker: SQL injection
Rsvpmaker is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8