PT-2025-5436 · Rsvpmaker · Rsvpmaker

Mika · Published 2025-01-27 · Updated 2025-01-27 · CVE-2025-24600

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions RSVPMarker versions prior to 11.4.5

Description The issue is related to a lack of authorization in RSVPMarker. This problem affects RSVPMarker from an unspecified starting version up to version 11.4.5.

Recommendations For versions prior to 11.4.5, update to version 11.4.5 or later to resolve the issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-24600

Affected Products

Rsvpmaker

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-24600 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/rsvpmaker/vulnerability/wordpress-rsvpmaker-plugin-11-4-5-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/wordpress/plugin/rsvpmaker/vulnerability/wordpress-rsvpmaker-plugin-11-4-5-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1883888554977186285 · Twitter Post