CVE-2022-1453

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5.

• CWE-89
• CWE-89
• CWE-89

• https://github.com/davidfcarr/rsvpmaker/commit/bfb189f49af7ab0d34499a2da772e3266f72167dPatch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2714389%40rsvpmaker&new=2714389%40rsvpmaker&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6031edec-4274-4e42-9e3a-ce0c94958b17?source=cveThird Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1453Third Party Advisory
• https://github.com/davidfcarr/rsvpmaker/commit/bfb189f49af7ab0d34499a2da772e3266f72167dPatch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2714389%40rsvpmaker&new=2714389%40rsvpmaker&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6031edec-4274-4e42-9e3a-ce0c94958b17?source=cveThird Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1453Third Party Advisory

Published

May 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1442The Metform WordPress plugin is vulnerable to sensitive info…7.5
• CVE-2022-1443Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2022-1444heap-use-after-free in GitHub repository radareorg/radare2 p…5.5
• CVE-2022-1445Stored Cross Site Scripting vulnerability in the checked_out…5.4
• CVE-2022-1451Out-of-bounds Read in r_bin_java_constant_value_attr_new fun…7.1
• CVE-2022-1452Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new …7.1
• CVE-2022-1455The Call Now Button WordPress plugin before 1.1.2 does not e…6.1
• CVE-2022-1456The Poll Maker WordPress plugin before 4.0.2 does not saniti…4.8
• CVE-2022-1457Store XSS in title parameter executing at EditUser Page & Ed…5.4
• CVE-2022-1458Stored XSS Leads To Session Hijacking in GitHub repository o…5.4
• CVE-2022-1459Non-Privilege User Can View Patient’s Disclosures in GitHub …8.3
• CVE-2022-1460An issue has been discovered in GitLab affecting all version…4.9