CVE-2019-13414

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontrewidget.php...

CVE-2019-13413

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontrewidget.php...

Sql injection

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontrewidget.php...

CVE-2019-13414

The CVE-2019-13414 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Rencontre plugin, fixed in version 3.1.3. Affected component: inc/rencontre_widget.php within the Rencontre plugin for WordPress (versions prior to 3.1.3). Root cause: improper validation of client...

CVE-2019-13413

The CVE-2019-13413 vulnerability affects the WordPress Rencontre plugin, specifically versions prior to 3.1.3. The issue is a SQL injection via inc/rencontre_widget.php, enabling an attacker to run arbitrary SQL statements. Affected product: Rencontre plugin for WordPress; component/file: inc/ren...

PT-2019-13325 · Rencontre · Rencontre

Name of the Vulnerable Software and Affected Versions: Rencontre plugin versions prior to 3.1.3 Description: The issue allows SQL Injection via the inc/rencontre widget.php file. Recommendations: For versions prior to 3.1.3, update to version 3.1.3 or later to resolve the issue...

PT-2019-13326 · Rencontre · Rencontre

Name of the Vulnerable Software and Affected Versions: Rencontre plugin versions prior to 3.1.3 Description: The issue allows for XSS attacks. This is due to a problem in the inc/rencontre widget.php file. Recommendations: For versions prior to 3.1.3, update to version 3.1.3 or later to resolve t...