Approved changes feed: RSS · Atom

cpe:2.3:a:david_f._carr:rsvpmaker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDavid F. Carr (ee49a4af-aebe-5a9e-bf93-683b59ba2630)
ProductRsvpmaker (90cb64b7-cdb5-5fc0-a228-d40aa806d5bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41652 vulnerable 2026-06-08 06:11:06.310262 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection
HIGH (8.2)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.
Published: 2023-11-03T11:06:26.432Z
Updated: 2026-04-29T09:51:49.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29095 vulnerable 2026-06-08 06:02:38.676781 WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection
HIGH (7.6)
Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions.
Published: 2023-07-10T13:08:33.885Z
Updated: 2026-04-28T16:08:17.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27617 vulnerable 2026-06-08 05:57:42.129596 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.
Published: 2023-09-27T05:22:52.415Z
Updated: 2026-04-28T16:08:14.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27616 vulnerable 2026-06-08 05:57:42.128070 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions.
Published: 2023-09-27T05:27:17.616Z
Updated: 2026-04-28T16:08:14.487Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25054 vulnerable 2026-06-08 05:56:08.456370 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)
CRITICAL (10)
Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6.
Published: 2023-12-29T08:53:42.781Z
Updated: 2026-04-28T16:08:07.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25047 vulnerable 2026-06-08 05:56:08.446072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25045 vulnerable 2026-06-08 05:56:08.442060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.