davidfcarr

Products

Product	CVEs	Exploited	Latest
Quick Playground	3	–	Jun 6, 2026
RSVPMaker	3	–	Jun 13, 2022
RSVPMarker	3	–	May 19, 2025
My Marginalia	1	–	Apr 17, 2025
RSVPMaker for Toastmasters	1	–	Nov 4, 2024
RSVPMaker Volunteer Roles	1	–	Jan 27, 2025

CVE-2026-2500 Medium 4.4 Quick Playground <= 1.3.4 - Authenticated (Administrator+) Arbitrary File Read via 'filename' Parameter 0.3%
CVE-2026-6403 High 7.5 Quick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter 0.8%
CVE-2026-1830 Critical 9.8 Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload 8.1%
CVE-2025-48278 High 8.5 WordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability 0.3%
CVE-2025-39435 High 7.1 WordPress My Marginalia plugin <= 1.0.6 - CSRF to Stored XSS vulnerability 0.2%
CVE-2025-31552 Critical 9.3 WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability 0.5%
CVE-2025-24600 Medium 5.3 WordPress RSVPMaker plugin <= 11.4.5 - Broken Access Control vulnerability 0.3%
CVE-2025-23531 High 7.1 WordPress RSVPMaker Volunteer Roles plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-50531 Critical 10.0 WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability 0.5%
CVE-2022-1768 Critical 9.8 RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection 12.9%
CVE-2022-1505 Critical 9.8 RSVPMaker <= 9.2.6 - Unauthenticated SQL Injection 1.9%
CVE-2022-1453 Critical 9.8 RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection 6.9%