WordPress Plugin Vulnerabilities

Rencontre – Dating Site <= 3.1.2 - SQLi & XSS

Description

SQL injection & XSS vulnerability in Rencontre – Dating Site Plugin For WordPress

Affects Plugins

Plugin icon
rencontre
Fixed in 3.1.3

References

CVE
CVE-2019-13413
CVE
CVE-2019-13414
URL
https://plugins.trac.wordpress.org/changeset/2119248

Miscellaneous

Original Researcher
Admavidhya N
Submitter
Admavidhya N
Verified
No
WPVDB ID
3e9664c4-8df9-4d53-8087-7194e6ec923b

Timeline

Publicly Published
2019-07-08 (about 6 years ago)
Added
2019-07-08 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-12-31
Title
twitterDash 2.1 - CSRF & XSS
Published
2015-02-09
Title
CrossSlide jQuery Plugin <= 2.0.5 - Stored XSS & CSRF
Published
2014-08-01
Title
IWantOneButton 3.0.1 - Multiple Vulnerabilities
Published
2020-03-17
Title
Custom Post Type UI < 1.7.4 - CSRF to Stored XSS
Published
2019-06-24
Title
Custom CSS Pro <= 1.0.3 - CSRF & XSS