WordPress Plugin Vulnerabilities

RSVPMaker < 5.6.4 - SQL Injection

Description

The RSVPMaker WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
rsvpmaker
Fixed in 5.6.4

References

CVE
CVE-2018-21004

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.3 (high)

Miscellaneous

Verified
No
WPVDB ID
3e3d8d51-ee5f-41d9-b6ba-82742571697f

Timeline

Publicly Published
2018-11-08 (about 7 years ago)
Added
2019-08-27 (about 6 years ago)
Last Updated
2020-08-09 (about 5 years ago)

Other

Published
Title
Published
2024-10-31
Title
Download-Mirror-Counter <= 1.1 - Authenticated (Contributor+) SQL Injection
Published
2025-08-18
Title
MDTF < 1.3.3.8 - Unauthenticated SQL Injection
Published
2026-01-08
Title
Felan Framework <= 1.1.3 - Unauthenticated SQL Injection
Published
2025-05-14
Title
File Provider <= 1.2.3 - Unauthenticated SQLi
Published
2023-04-25
Title
YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi