Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in RSVP and Event Management Plugin 2.7.5

  • Severity: medium-risk
  • Status: Fixed
  • Publication: January 13, 2022

The RSVP and Event Management plugin for WordPress is vulnerable to a type of cyber attack called Cross-Site Scripting. This means that malicious code can be put into a website and then run on someone else’s browser. This vulnerability exists in versions up to and including version 2.7.4. This means that the plugin was not properly protected to prevent this malicious code from running, though it has since been fixed.

Detected in:

RSVP and Event Management fixed vulnerable versions:
RSVP and Event Management Plugin fixed vulnerable versions: >= * < 2.7.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.