Skip to main content

Rencontre

3 CVEs product

Monthly

CVE-2023-51470 Dec 29, 13:15 CRITICAL Act Now

Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre - Dating Site.11.1. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization Rencontre Boiteasite
NVD
CVSS 3.1
9.9
EPSS
0.7%
CVE-2019-13414 Jul 08, 14:15 MEDIUM PATCH This Month

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP WordPress XSS Wordpress Plugin Rencontre +1
NVD
CVSS 3.1
6.1
EPSS
1.1%
CVE-2019-13413 Jul 08, 14:15 CRITICAL PATCH Act Now

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP WordPress SQLi Wordpress Plugin Rencontre +1
NVD
CVSS 3.1
9.8
EPSS
2.2%
EPSS 1% CVSS 9.9
CRITICAL Act Now

Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre - Dating Site.11.1. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization Rencontre Boiteasite
NVD
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP WordPress XSS +3
NVD
EPSS 2% CVSS 9.8
CRITICAL PATCH Act Now

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP WordPress SQLi +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy