{"cvss":0.0,"datePublished":"2026-03-31T00:00:00Z","dateUpdated":"2026-03-31T00:00:00Z","description":"The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5.","dueDate":"","id":"CVE-2022-1453","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"rsvpmaker","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"carrcommunications rsvpmaker Improper Neutralization of Special Elements used in an SQL Command","vendor":"carrcommunications"}