GCVE - cpe:2.3:a:davidfcarr:rsvpmaker:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:davidfcarr:rsvpmaker:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Davidfcarr (`78da02b4-66bd-52bd-a58d-3923de48a5fd`)
Product	Rsvpmaker (`19bbd800-daed-5031-9b23-8215346a77bf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-1768`	vulnerable	2026-06-08 05:39:13.882592	RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection CRITICAL (9.8) The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to, and including, 9.3.2. Please note that this is separate from CVE-2022-1453 & CVE-2022-1505. Published: 2022-06-13T13:08:27.000Z Updated: 2026-04-08T17:19:57.034Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/c1d02646-271a-4079-8a47-00b4029e9c1f?source=cve https://gist.github.com/Xib3rR4dAr/441d6bb4a5b8ad4b25074a49210a02cc https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1768 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2725322%40rsvpmaker&new=2725322%40rsvpmaker&sfp_email=&sfph_mail=	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1505`	vulnerable	2026-06-08 05:39:13.321555	RSVPMaker <= 9.2.6 - Unauthenticated SQL Injection CRITICAL (9.8) The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.6. Published: 2022-05-10T19:35:59.000Z Updated: 2026-04-08T16:58:25.101Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/6837b91d-b3ba-435a-965b-fa18d9b9b9c8?source=cve https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715095%40rsvpmaker&new=2715095%40rsvpmaker&sfp_email=&sfph_mail= https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1505	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-1453`	vulnerable	2026-06-08 05:39:13.178951	RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection CRITICAL (9.8) The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5. Published: 2022-05-10T19:29:20.000Z Updated: 2026-04-08T16:56:32.383Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/6031edec-4274-4e42-9e3a-ce0c94958b17?source=cve https://github.com/davidfcarr/rsvpmaker/commit/bfb189f49af7ab0d34499a2da772e3266f72167d https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1453 https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2714389%40rsvpmaker&new=2714389%40rsvpmaker&sfp_email=&sfph_mail=	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.