davidfcarr vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20241
3. 20255
4. 20263

Newest CVEs

• CVE-2026-2500

  Quick Playground <= 1.3.4 - Authenticated (Administrator+) Arbitrary File Read via 'filename' Parameter

  davidfcarr · Quick Playground

  Medium4.4
• CVE-2026-6403

  Quick Playground <= 1.3.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter

  davidfcarr · Quick Playground

  High7.5
• CVE-2026-1830

  Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload

  davidfcarr · Quick Playground

  Critical9.8
• CVE-2025-48278

  WordPress RSVPMarker plugin <= 11.5.6 - SQL Injection Vulnerability

  davidfcarr · RSVPMarker

  High8.5
• CVE-2025-39435

  WordPress My Marginalia plugin <= 1.0.6 - CSRF to Stored XSS vulnerability

  davidfcarr · My Marginalia

  High7.1
• CVE-2025-31552

  WordPress RSVPMarker plugin <= 11.6.7 - SQL Injection vulnerability

  davidfcarr · RSVPMarker

  Critical9.3
• CVE-2025-24600

  WordPress RSVPMaker plugin <= 11.4.5 - Broken Access Control vulnerability

  davidfcarr · RSVPMarker

  Medium5.3
• CVE-2025-23531

  WordPress RSVPMaker Volunteer Roles plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

  davidfcarr · RSVPMaker Volunteer Roles

  High7.1
• CVE-2024-50531

  WordPress RSVPMaker for Toastmasters plugin <= 6.2.4 - Arbitrary File Upload vulnerability

  davidfcarr · RSVPMaker for Toastmasters

  Critical10.0
• CVE-2022-1768

  RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection

  davidfcarr · RSVPMaker

  Critical9.8