RSVP and Event Management (N/a Through 2.7.17) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/rsvp-and-event-management-n/a-through-2.7.17/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 11:40:32 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWP Chill RSVP and Event Management: Stored Cross-Site Scripting (CVE-2026-121570)https://feed.craftedsignal.io/briefs/2026-11-rsvp-xss/Mon, 09 Nov 2026 11:40:32 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-rsvp-xss/A stored cross-site scripting (XSS) vulnerability exists in the WP Chill RSVP and Event Management plugin due to improper neutralization of input during web page generation.<p>The RSVP and Event Management plugin for WordPress (versions from n/a through 2.7.17) is affected by an Improper Neutralization of Input During Web Page Generation vulnerability, classified as Stored XSS.</p> highadvisory