Back to CVE Browser

CVE-2018-21004

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0340%

EPSS Percentile7.46th

PublishedAug 27, 2019

Last ModifiedNov 21, 2024

Vulnerability Description

The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.

Affected Platforms (CPE)

📦

Carrcommunications

Rsvpmaker

< 5.6.4

References & Advisories

🔗 https://plugins.trac.wordpress.org/log/rsvpmaker/tags/5.6.4

🔗 https://wordpress.org/plugins/rsvpmaker/#developers

🔗 https://wpvulndb.com/vulnerabilities/9831

🔗 https://plugins.trac.wordpress.org/log/rsvpmaker/tags/5.6.4

🔗 https://wordpress.org/plugins/rsvpmaker/#developers

🔗 https://wpvulndb.com/vulnerabilities/9831

Related Vulnerabilities

CVE-2019-156469.8

The rsvpmaker plugin before 6.2 for WordPress has SQL injection.

CVE-2021-383376.1

The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value...

CVE-2021-243712.7

The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL ...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...