Vulnerabilities

TI-2023-28120 CVE-2023-51468 · GHSA-6hxc-6hfm-wgvq

WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0063 Published 2023-12-29 No fix listed CWE-434

TI-2023-28122 CVE-2023-51470 · GHSA-3rp7-3qfg-r7f3

WordPress Rencontre – Dating Site Plugin <= 3.11.1 is vulnerable to PHP Object Injection

MEDIUM 43

Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.11.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00621 Published 2023-12-29 No fix listed CWE-502

TI-2019-10083 CVE-2019-13414 · GHSA-vr9h-mqv2-4p47

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php.

LOW 30

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01129 Published 2019-07-08 No fix listed CWE-79

TI-2019-10082 CVE-2019-13413 · GHSA-99g2-gvrx-c624

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php.

MEDIUM 46

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02201 Published 2019-07-08 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload

WordPress Rencontre – Dating Site Plugin <= 3.11.1 is vulnerable to PHP Object Injection

The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php.

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php.