Davidfcarr vulnerabilities

Products

• Rsvpmaker 11
• Rsvpmarker 5
• Quick Playground 3

Newest

• davidfcarr quick playground Quick Playground <= 1.3.4 - Authenticated (Administrator+) Arbitrary File Read via 'filename' Parameter CVE-2026-2500 4.4 MediumJune 6, 2026
• davidfcarr quick playground Quick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter CVE-2026-6403 7.5 HighMay 15, 2026
• davidfcarr quick playground Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload CVE-2026-1830 Public exploit 9.8 CriticalApril 9, 2026
• davidfcarr rsvpmarker WordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability CVE-2025-48278 8.5 HighMay 19, 2025
• davidfcarr my marginalia WordPress My Marginalia plugin <= 1.0.6 - CSRF to Stored XSS vulnerability CVE-2025-39435 7.1 HighApril 17, 2025
• davidfcarr rsvpmarker WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability CVE-2025-31552 9.3 CriticalApril 1, 2025
• davidfcarr rsvpmarker WordPress RSVPMaker plugin <= 11.4.5 - Broken Access Control vulnerability CVE-2025-24600 5.3 MediumJanuary 27, 2025
• david f. carr rsvpmaker volunteer roles WordPress RSVPMaker Volunteer Roles plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23531 7.1 HighJanuary 27, 2025
• carrcommunications rsvpmaker, david f. carr rsvpmaker for toastmasters, davidfcarr rsvpmarker +2 more WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability CVE-2024-50531 10.0 CriticalNovember 4, 2024
• carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE) CVE-2023-25054 10.0 CriticalDecember 29, 2023
• carrcommunications rsvpmaker, davidfcarr rsvpmarker +1 more WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection CVE-2023-41652 Public exploit 8.2 HighNovember 3, 2023
• carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection CVE-2023-25047 5.5 MediumOctober 31, 2023
• carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection CVE-2023-25045 6.7 MediumOctober 31, 2023
• carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27616 7.1 HighSeptember 27, 2023
• carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27617 5.9 MediumSeptember 27, 2023
• carrcommunications rsvpmaker WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection CVE-2023-29095 7.6 HighJuly 10, 2023
• carrcommunications rsvpmaker RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection CVE-2022-1768 EPSS 12.9% 9.8 CriticalJune 13, 2022
• carrcommunications rsvpmaker RSVPMaker <= 9.2.6 - Unauthenticated SQL Injection CVE-2022-1505 9.8 CriticalMay 10, 2022
• carrcommunications rsvpmaker RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection CVE-2022-1453 9.8 CriticalMay 10, 2022
• carrcommunications rsvpmaker RSVPMaker < 8.7.3 - Authenticated (admin+) SSRF CVE-2021-24371 2.7 LowAugust 2, 2021