Known Vulnerabilities for products from Carrcommunications

Listed below are 15 of the newest known vulnerabilities associated with the vendor "Carrcommunications".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2024-50531 json Unrestricted Upload of File with Dangerous Type vulnerability in davidfcarr RSVPMaker for Toastmasters rsvpmaker-for-toastmas... Not Provided 2024-11-04 2026-04-01
CVE-2023-41652 json Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker... 9.8 - CRITICAL 2023-11-03 2023-11-13
CVE-2023-29095 json Auth. (admin+) SQL Injection (SQLi) vulnerability in David F. Carr RSVPMaker plugin < 10.5.5 versions. 7.2 - HIGH 2023-07-10 2023-09-30
CVE-2023-27617 json Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. 4.8 - MEDIUM 2023-09-27 2023-09-29
CVE-2023-27616 json Unauth. Stored Cross-Site Scripting (XSS) vulnerability in David F. Carr RSVPMaker plugin <= 10.6.6 versions. 6.1 - MEDIUM 2023-09-27 2023-09-29
CVE-2023-25054 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2023-12-29 2024-01-04
CVE-2023-25047 json Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker... 7.2 - HIGH 2023-10-31 2023-11-08
CVE-2023-25045 json Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker... 7.2 - HIGH 2023-10-31 2023-11-08
CVE-2022-1768 json The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameteri... Not Provided 2022-06-13 2026-04-08
CVE-2022-1505 json The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameteriz... Not Provided 2022-05-10 2026-04-08
CVE-2022-1453 json The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameteriz... Not Provided 2022-05-10 2026-04-08
CVE-2021-38337 json The RSVPMaker Excel WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] ... 6.1 - MEDIUM 2021-09-10 2021-09-15
CVE-2021-24371 json The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an... 2.7 - LOW 2021-08-02 2023-09-30
CVE-2019-15646 json The rsvpmaker plugin before 6.2 for WordPress has SQL injection. 9.8 - CRITICAL 2019-08-27 2023-09-30
CVE-2018-21004 json The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. 9.8 - CRITICAL 2019-08-27 2023-09-30