CVE-2022-1505

The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.6.

• CWE-89
• CWE-89
• CWE-89

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715095%40rsvpmaker&new=2715095%40rsvpmaker&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6837b91d-b3ba-435a-965b-fa18d9b9b9c8?source=cveThird Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1505Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715095%40rsvpmaker&new=2715095%40rsvpmaker&sfp_email=&sfph_mail=Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6837b91d-b3ba-435a-965b-fa18d9b9b9c8?source=cveThird Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1505Third Party Advisory

Published

May 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1499Inappropriate implementation in WebAuthentication in Google …6.3
• CVE-2022-1500Insufficient data validation in Dev Tools in Google Chrome p…6.5
• CVE-2022-1501Inappropriate implementation in iframe in Google Chrome prio…6.5
• CVE-2022-1502Permissions were not properly verified in the API on project…4.3
• CVE-2022-1503A vulnerability, which was classified as problematic, has be…5.4
• CVE-2022-1504XSS in /demo/module/?module=HERE in GitHub repository microw…6.1
• CVE-2022-1506The WP Born Babies WordPress plugin through 1.0 does not san…5.4
• CVE-2022-1507chafa: NULL Pointer Dereference in function gif_internal_dec…5.5
• CVE-2022-1508An out-of-bounds read flaw was found in the Linux kernel’s i…6.1
• CVE-2022-1509Command Injection Vulnerability in GitHub repository hestiac…8.8
• CVE-2022-1510An issue has been discovered in GitLab affecting all version…7.5
• CVE-2022-1511Missing Authorization in GitHub repository snipe/snipe-it pr…6.5