carrcommunications records

15 published records for vendor carrcommunications.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 53.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

15 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2019-15646No exploit	The rsvpmaker plugin before 6.2 for WordPress has SQL injection.carrcommunications · rsvpmaker · CWE-89 Pre-auth SQL injection	Critical9.8	—	2.2%	Aug 27, 2019
40Plan	CVE-2018-21004No exploit	The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.carrcommunications · rsvpmaker · CWE-89 Pre-auth SQL injection	Critical9.8	—	2.2%	Aug 27, 2019
39Monitor	CVE-2023-41652Proof of concept	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injectioncarrcommunications · rsvpmaker · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.0%	Nov 3, 2023
39Monitor	CVE-2023-25054No exploit	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)carrcommunications · rsvpmaker · CWE-94 pre-auth RCE	Critical9.8	—	0.8%	Dec 29, 2023
39Monitor	CVE-2024-50531No exploit	WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerabilitycarrcommunications · rsvpmaker · CWE-434 Pre-auth File upload	Critical9.8	—	0.5%	Nov 4, 2024
34Monitor	CVE-2022-1768Proof of concept	RSVPMaker <= 9.3.2 - Unauthenticated SQL Injectioncarrcommunications · rsvpmaker · CWE-89 Pre-auth SQL injection	High7.5	—	12.8%	Jun 13, 2022
32Monitor	CVE-2022-1453Proof of concept	RSVPMaker <= 9.2.5 - Unauthenticated SQL Injectioncarrcommunications · rsvpmaker · CWE-89 Pre-auth SQL injection	High7.5	—	6.9%	May 10, 2022
31Monitor	CVE-2022-1505No exploit	RSVPMaker <= 9.2.6 - Unauthenticated SQL Injectioncarrcommunications · rsvpmaker · CWE-89 Pre-auth SQL injection	High7.5	—	1.9%	May 10, 2022
28Monitor	CVE-2023-29095No exploit	WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injectioncarrcommunications · rsvpmaker · CWE-89 SQL injection	High7.2	—	0.9%	Jul 10, 2023
28Monitor	CVE-2023-25047No exploit	WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injectioncarrcommunications · rsvpmaker · CWE-89 SQL injection	High7.2	—	0.6%	Oct 31, 2023
28Monitor	CVE-2023-25045No exploit	WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injectioncarrcommunications · rsvpmaker · CWE-89 SQL injection	High7.2	—	0.5%	Oct 31, 2023
24Monitor	CVE-2021-38337No exploit	RSVPMaker Excel <= 1.1 Reflected Cross-Site Scriptingcarrcommunications · rsvpmaker excel · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Sep 10, 2021
24Monitor	CVE-2023-27616No exploit	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)carrcommunications · rsvpmaker · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Sep 27, 2023
19Monitor	CVE-2023-27617No exploit	WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)carrcommunications · rsvpmaker · CWE-79 XSS	Medium4.8	—	0.3%	Sep 27, 2023
10Monitor	CVE-2021-24371No exploit	RSVPMaker < 8.7.3 - Authenticated (admin+) SSRFcarrcommunications · rsvpmaker · CWE-918 SSRF	Low2.7	—	1.0%	Aug 2, 2021

CVE-2019-15646
40Plan
The rsvpmaker plugin before 6.2 for WordPress has SQL injection.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- SQL injection
carrcommunications · rsvpmakerAug 27, 2019
CVE-2018-21004
40Plan
The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- SQL injection
carrcommunications · rsvpmakerAug 27, 2019
CVE-2023-41652
39Monitor
WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- SQL injection
carrcommunications · rsvpmakerNov 3, 2023
CVE-2023-25054
39Monitor
WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
carrcommunications · rsvpmakerDec 29, 2023
CVE-2024-50531
39Monitor
WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
carrcommunications · rsvpmakerNov 4, 2024
CVE-2022-1768
34Monitor
RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- SQL injection
carrcommunications · rsvpmakerJun 13, 2022
CVE-2022-1453
32Monitor
RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection
HighCVSS 7.5Proof of conceptEPSS 6%
- Pre-auth
- SQL injection
carrcommunications · rsvpmakerMay 10, 2022
CVE-2022-1505
31Monitor
RSVPMaker <= 9.2.6 - Unauthenticated SQL Injection
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- SQL injection
carrcommunications · rsvpmakerMay 10, 2022
CVE-2023-29095
28Monitor
WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
carrcommunications · rsvpmakerJul 10, 2023
CVE-2023-25047
28Monitor
WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
carrcommunications · rsvpmakerOct 31, 2023
CVE-2023-25045
28Monitor
WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
carrcommunications · rsvpmakerOct 31, 2023
CVE-2021-38337
24Monitor
RSVPMaker Excel <= 1.1 Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
carrcommunications · rsvpmaker excelSep 10, 2021
CVE-2023-27616
24Monitor
WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
carrcommunications · rsvpmakerSep 27, 2023
CVE-2023-27617
19Monitor
WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
carrcommunications · rsvpmakerSep 27, 2023
CVE-2021-24371
10Monitor
RSVPMaker < 8.7.3 - Authenticated (admin+) SSRF
LowCVSS 2.7No exploitEPSS 1%
- SSRF
carrcommunications · rsvpmakerAug 2, 2021