PT-2023-31837 · Unknown · Rencontre – Dating Site

Name of the Vulnerable Software and Affected Versions: Rencontre – Dating Site versions n/a through 3.11.1 Description: The issue is related to Deserialization of Untrusted Data, which affects the Rencontre – Dating Site. There is no information provided about the estimated number of potentially...

WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Privilege Escalation

Software Rencontre – Dating Site Type Plugin Vulnerable versions = 3.10.1 Fixed in 3.11 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-51425 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 603c87225836 Credits...

WordPress Rencontre – Dating Site Plugin <= 3.11.1 is vulnerable to PHP Object Injection

Software Rencontre – Dating Site Type Plugin Vulnerable versions = 3.11.1 Fixed in 3.11.2 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-51470 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID b7a3ac082038 Credits Rafie Muhammad Patchstack...

rencontre-5-a-7.com Improper Access Control vulnerability OBB-3810272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Rencontre – Dating Site plugin <= 3.2.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

Multiple Cross-Site Request Forgery CSRF vulnerabilities found in WordPress Rencontre – Dating Site plugin versions = 3.2.2. Solution Update the WordPress Rencontre – Dating Site plugin to the latest available version at least 3.2.3...

Rencontre <= 3.2.2 - Multiple CSRF

The plugins is affected by multiple CSRF issues, allowing arbitrary changes of the plugin's settings. November 3rd, 2019 - WordPress Plugin Team Notified November 5th, 2019 - WP Plugins Team acknowledgments of the issue. December 2nd, 2019 - v3.2.2 released, none of the CSRF have been fixed as th...

Rencontre <= 3.2.2 - Multiple CSRF

The plugins is affected by multiple CSRF issues, allowing arbitrary changes of the plugin's settings. November 3rd, 2019 - WordPress Plugin Team Notified November 5th, 2019 - WP Plugins Team acknowledgments of the issue. December 2nd, 2019 - v3.2.2 released, none of the CSRF have been fixed as th...

WordPress Rencontre – Dating Site plugin <= 3.1.2 - SQL Injection (SQLi) and Cross-Site Scripting (XSS) vulnerabilities

SQL Injection SQLi and Cross-Site Scripting XSS vulnerabilities found by Admavidhya N in WordPress Rencontre – Dating Site plugin versions = 3.1.2. Solution 10 July 2019 - waiting for approval...

WordPress Rencontre Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Rencontre plugin is a social networking site creation plugin used in it. A cross-site scripting vulnerability exists in WordPress...

WordPress Rencontre Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Rencontre plugin is a social networking site creation plugin used in it. A SQL injection vulnerability exists in WordPress Rencontre...

CVE-2019-13414

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontrewidget.php...

CVE-2019-13414

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontrewidget.php...

CVE-2019-13413

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontrewidget.php...

CVE-2019-13413

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontrewidget.php...

Sql injection

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontrewidget.php...

CVE-2019-13414

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontrewidget.php...

CVE-2019-13414

The CVE-2019-13414 entry corresponds to a cross-site scripting (XSS) vulnerability in the WordPress Rencontre plugin, fixed in version 3.1.3. Affected component: inc/rencontre_widget.php within the Rencontre plugin for WordPress (versions prior to 3.1.3). Root cause: improper validation of client...

CVE-2019-13413

The CVE-2019-13413 vulnerability affects the WordPress Rencontre plugin, specifically versions prior to 3.1.3. The issue is a SQL injection via inc/rencontre_widget.php, enabling an attacker to run arbitrary SQL statements. Affected product: Rencontre plugin for WordPress; component/file: inc/ren...

Rencontre – Dating Site <= 3.1.2 - SQLi & XSS

SQL injection & XSS vulnerability in Rencontre – Dating Site Plugin For WordPress...

PT-2019-13326 · Rencontre · Rencontre

Name of the Vulnerable Software and Affected Versions: Rencontre plugin versions prior to 3.1.3 Description: The issue allows for XSS attacks. This is due to a problem in the inc/rencontre widget.php file. Recommendations: For versions prior to 3.1.3, update to version 3.1.3 or later to resolve t...