CVE-2025-24683: Wp Chill Rsvp And Event Management

High severity, CVSS 7.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Chill RSVP and Event Management rsvp allows SQL Injection.This issue affects RSVP and Event Management: from n/a through <= 2.7.14.

Affected products

• Wp Chill Rsvp And Event Management: up to and including 2.7.14

Published 2025-01-24. Last modified 2026-06-17.