Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2024-11-04	CVE-2024-50531	Unrestricted Upload of File with Dangerous Type vulnerability in Carrcommunications Rsvpmaker Unrestricted Upload of File with Dangerous Type vulnerability in David F. network low complexity carrcommunications CWE-434 critical	9.8
2023-12-29	CVE-2023-25054	Code Injection vulnerability in Carrcommunications Rsvpmaker Improper Control of Generation of Code ('Code Injection') vulnerability in David F. network low complexity carrcommunications CWE-94 critical	9.8
2023-11-03	CVE-2023-41652	SQL Injection vulnerability in Carrcommunications Rsvpmaker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. network low complexity carrcommunications CWE-89 critical	9.8
2019-08-27	CVE-2018-21004	SQL Injection vulnerability in Carrcommunications Rsvpmaker The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. network low complexity carrcommunications CWE-89 critical	9.8
2019-08-27	CVE-2019-15646	SQL Injection vulnerability in Carrcommunications Rsvpmaker The rsvpmaker plugin before 6.2 for WordPress has SQL injection. network low complexity carrcommunications CWE-89 critical	9.8