WordPress Plugin Vulnerabilities

RSVPMaker 2.5.4 - index.php RSVP Form Multiple Field XSS

Description

The RSVPMaker WordPress plugin was affected by an index.php RSVP Form Multiple Field XSS security vulnerability.

Affects Plugins

Plugin icon
rsvpmaker
Fixed in 2.5.5

References

Exploitdb
20474

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
9.6 (critical)

Miscellaneous

Verified
No
WPVDB ID
072e5270-d9e9-4ff2-8b36-6b0364d2f705

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-08-09 (about 5 years ago)

Other

Published
Title
Published
2023-01-23
Title
Twenty20 Image Before-After <= 2.0.4 - Contributor+ Stored XSS
Published
2025-04-10
Title
MSRP (RRP) Pricing for WooCommerce < 2.0.0 - Reflected Cross-Site Scripting
Published
2021-03-30
Title
Woocommerce Customers Manager < 26.6 - Authenticated Reflected Cross-Site Scripting (XSS)
Published
2020-12-19
Title
Envira Gallery Lite < 1.8.3.3 - Authenticated Stored Cross-Site Scripting
Published
2024-06-24
Title
WP eStore < 8.5.5 - Reflected XSS via $_SERVER['REQUEST_URI']