WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in RSVPMaker

Event and email marketing. Register guests and collect payment by PayPal or Stripe. Send invitations and newsletters.

17Reported vulnerabilities
9.8Highest CVSS score
12.1Latest version
300+Active installs

What to do now

Update RSVPMaker to 11.5.7 or later. 17 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 22, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-1768 High 7.5 12.9% 9.3.2 and earlier 9.3.3 June 13, 2022
CVE-2019-15646 Critical 9.8 2.3% Before 6.2 6.2 August 27, 2019
CVE-2018-21004 Critical 9.8 2.2% Before 5.6.4 5.6.4 August 27, 2019
CVE-2022-1453 High 7.5 7.1% Before 9.2.6 9.2.6 May 10, 2022
CVE-2023-41652 Critical 9.8 0.9% 10.6.6 and earlier 10.6.7 September 1, 2023
CVE-2023-25054 Critical 9.8 0.7% 10.6.6 and earlier 10.6.7 September 5, 2023
WF-da6eb803-3e2a-4ff1-9b93-6f109e8d0714 Critical 9.8 — Before 7.8.2 7.8.2 August 22, 2020
CVE-2022-1505 High 7.5 1.8% Before 9.2.7 9.2.7 May 10, 2022
CVE-2025-31552 High 7.5 0.5% 11.6.7 and earlier 11.6.8 March 31, 2025
CVE-2023-29095 High 7.2 0.9% Before 10.5.5 10.5.5 July 5, 2023
CVE-2023-27616 High 7.2 0.4% 10.6.5 and earlier 10.6.6 August 17, 2023
CVE-2023-25047 High 7.2 0.7% 9.9.3 and earlier 9.9.4 February 13, 2023
CVE-2023-25045 High 7.2 0.5% 9.9.3 and earlier 9.9.4 February 13, 2023
CVE-2021-24371 Low 2.7 1.0% Before 8.7.3 8.7.3 August 2, 2021
CVE-2025-48278 Medium 6.5 0.3% 11.5.6 and earlier 11.5.7 May 19, 2025
CVE-2025-24600 Medium 5.3 0.3% 11.4.5 and earlier 11.4.6 January 24, 2025
CVE-2023-27617 Medium 4.4 0.4% 10.6.5 and earlier 10.6.7 August 17, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.