Design/Logic Flaw

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontrewidget.php...

CVE-2019-13414

The CVE-2019-13414 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Rencontre plugin, fixed in version 3.1.3. Affected component: inc/rencontre_widget.php within the Rencontre plugin for WordPress (versions prior to 3.1.3). Root cause: improper validation of client...

CVE-2019-13413

The CVE-2019-13413 vulnerability affects the WordPress Rencontre plugin, specifically versions prior to 3.1.3. The issue is a SQL injection via inc/rencontre_widget.php, enabling an attacker to run arbitrary SQL statements. Affected product: Rencontre plugin for WordPress; component/file: inc/ren...