Known vulnerabilities in the Rsvpmaker plugin
17 security advisories have been published for the Rsvpmaker plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Rsvpmaker - SQL Injection (CVE-2025-48278) HIGH
- Rsvpmaker - SQL Injection (CVE-2025-31552) CRITICAL
- Rsvpmaker - Broken Access Control (CVE-2025-24600) MEDIUM
- Rsvpmaker - Arbitrary File Upload (CVE-2024-50531) CRITICAL
- Rsvpmaker - Remote Code Execution (CVE-2023-25054) CRITICAL
- Rsvpmaker - SQL Injection (CVE-2023-41652) HIGH
- Rsvpmaker - SQL Injection (CVE-2023-25045) MEDIUM
- Rsvpmaker - SQL Injection (CVE-2023-25047) MEDIUM
- Rsvpmaker - Cross-Site Scripting (XSS) (CVE-2023-27616) HIGH
- Rsvpmaker - Cross-Site Scripting (XSS) (CVE-2023-27617) MEDIUM
- Rsvpmaker - SQL Injection (CVE-2023-29095) HIGH
- Rsvpmaker - SQL Injection (CVE-2022-1768) CRITICAL
- Rsvpmaker - SQL Injection (CVE-2022-1505) CRITICAL
- Rsvpmaker - SQL Injection (CVE-2022-1453) CRITICAL
- Rsvpmaker - Server-Side Request Forgery (SSRF) (CVE-2021-24371) LOW
- Rsvpmaker - SQL Injection (CVE-2019-15646) CRITICAL
- Rsvpmaker - SQL Injection (CVE-2018-21004) CRITICAL