RSVPMaker

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 67% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ eppyga

   2.0y ago

   I’ve been using this plugin for a couple of months now. It has worked well for me. I have had a couple of issues but David is always quick to address them. If you are looking to do RSVP Forms, give this a try.

   Read on wp.org ↗
2. ★★★★★ khuyentran1401

   5.3y ago

   I was successful in installing the plugin, but when I activated it, I got this error “The plugin does not have a valid header”. I wonder what causes the issue here?

   Read on wp.org ↗
3. ★★★★★ moonshdw8

   6.9y ago

   We only needed some VERY basic functionality which is oddly hard to find in the other RSVP plugins I tried. Most of the other had hard coded requirements that I couldn’t find a way around. RSVPMaker’s form builder was exactly what we needed. It take s a little bit to navigate because of all of the features and options, but it can do a lot.

   Read on wp.org ↗
4. ★★★★★ ravimallya

   6.9y ago

   I tried several premium and free plugins but this seems to be doing the job very nicely. However, the admin flow and design has to be changed a bit. I can help with the design part of admin section.

   Read on wp.org ↗
5. ★★★★★ joicek

   7.8y ago

   Works very well, it’s free and you have the support when needed.

   Read on wp.org ↗
6. ★★★★★ chellorace

   7.9y ago

   Works like a champ! One of the best plugin out there! Thank you for the hard work! The support is amazing! David you rock!!! Thank you! Best plugin for RSVP!!! This topic was modified 7 years, 9 months ago by chellorace.

   Read on wp.org ↗
7. ★★★★★ remainevil

   9.3y ago

   Hi there! This is the perfect plugin for me! I use it to plan how many team members will come to the next trainings. We had an email list with 20 emails each week. Now every member subscribes, if he will or will not play at the next training. Thanks!

   Read on wp.org ↗
8. ★★★★★ Paula Finch

   9.8y ago

   This plugin allowed me to schedule a boat load of events all at once through the template. When there was a problem with PayPal transferring and updating to all the events, the developer created an update that took care of the issue and saved me hours of time updating the events. David is awesome and responded to my request for support immediately. Wow!! I am super impressed with him and the plugin.

   Read on wp.org ↗

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 RSVPMarker <= 11.5.6 - Authenticated (Contributor+) SQL Injection ↗
   2025-05-19 CVE-2025-48278 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 11.5.6 Patched in 11.5.7
2. High · 7.5 RSVPMarker <= 11.6.7 - Unauthenticated SQL Injection ↗
   2025-03-31 CVE-2025-31552 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 11.6.7 Patched in 11.6.8
3. Medium · 5.3 RSVPMarker <= 11.4.5 - Missing Authorization ↗
   2025-01-24 CVE-2025-24600 Missing Authorization Affects <= 11.4.5 Patched in 11.4.6
4. Critical · 9.8 RSVPMaker <= 10.6.6 - Unauthenticated PHP Object Injection ↗
   2023-09-05 CVE-2023-25054 Deserialization of Untrusted Data Affects <= 10.6.6 Patched in 10.6.7
5. Critical · 9.8 RSVPMarker <= 10.6.6 - Unauthenticated SQL Injection ↗
   2023-09-01 CVE-2023-41652 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 10.6.6 Patched in 10.6.7
6. High · 7.2 RSVPMaker <= 10.6.5 - Unauthenticated Stored Cross-Site Scripting via 'email' ↗
   2023-08-17 CVE-2023-27616 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 10.6.5 Patched in 10.6.6
7. Medium · 4.4 RSVPMarker <= 10.6.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings ↗
   2023-08-17 CVE-2023-27617 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 10.6.5 Patched in 10.6.7
8. High · 7.2 RSVPMaker <= 10.5.4 - Authenticated (Administrator+) SQL Injection via 'resend' ↗
   2023-07-05 CVE-2023-29095 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 10.5.5 Patched in 10.5.5
9. High · 7.2 RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via 'delete' parameter ↗
   2023-02-13 CVE-2023-25047 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 9.9.3 Patched in 9.9.4
10. High · 7.2 RSVPMaker <= 9.9.3 - Authenticated (Admin+) SQL Injection via $email value ↗
    2023-02-13 CVE-2023-25045 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 9.9.3 Patched in 9.9.4
11. Critical · 9.8 RSVPMaker <= 9.3.2 - Unauthenticated SQL Injection ↗
    2022-05-17 CVE-2022-1768 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 9.3.2 Patched in 9.3.3
12. Critical · 9.8 RSVPMaker <= 9.2.6 - Unauthenticated SQL Injection ↗
    2022-04-27 CVE-2022-1505 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 9.2.6 Patched in 9.2.7
13. Critical · 9.8 RSVPMaker <= 9.2.5 - Unauthenticated SQL Injection ↗
    2022-04-26 CVE-2022-1453 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 9.2.5 Patched in 9.2.6
14. Low · 2.7 RSVPMaker <= 8.7.2 - Server-Side Request Forgery ↗
    2021-06-29 CVE-2021-24371 Server-Side Request Forgery (SSRF) Affects < 8.7.3 Patched in 8.7.4
15. Critical · 9.8 RSVPMaker <= 7.8.1 - Unauthenticated SQL Injection via 'event_count' ↗
    2020-08-22 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 7.8.2 Patched in 7.8.2
16. Critical · 9.8 RSVPMaker <= 6.1.9 - SQL Injection ↗
    2019-04-28 CVE-2019-15646 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.1.9 Patched in 6.2
17. Critical · 9.8 RSVPMaker < 5.6.4 - SQL Injection ↗
    2018-11-08 CVE-2018-21004 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 5.6.4 Patched in 5.6.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 7 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-17 200+ → 300+ up after 7 days in tier
2. 2026-07-10 300+ → 200+ down after 10 days in tier
3. 2026-06-30 200+ → 300+ up after 1 days in tier
4. 2026-06-29 300+ → 200+ down after 1 days in tier
5. 2026-06-28 200+ → 300+ up after 3 days in tier
6. 2026-06-25 300+ → 200+ down after 205 days in tier
7. 2025-12-02 400+ → 300+ down after 45 days in tier
8. 2025-10-18 300+ → 400+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Add to Calendar Button 3K+ installs · 4.4★ · 3 shared tags A
• The Events Calendar 600K+ installs · 4.2★ · 2 shared tags A
• Klaviyo 100K+ installs · 3.2★ · 2 shared tags B
• Mailchimp List Subscribe Form 60K+ installs · 2.8★ · 2 shared tags B
• Timetable and Event Schedule by MotoPress 30K+ installs · 4.3★ · 2 shared tags A
• WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce 20K+ installs · 4.0★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for RSVPMaker into a readme, a review or a deck. It updates itself.

RSVPMaker: 300+ active installs, 4.6★ (11 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/rsvpmaker