boiteasite vulnerabilities

Products

• rencontre 3
• download rencontre - dating site 1

Latest boiteasite CVEs

Newest publication first

1. CVE-2023-51468 WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File Upload

   Published 2023-12-29

   Critical·CVSS 9.8 EPSS 0.63%

   Unrestricted Upload of File with Dangerous Type vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.

2. CVE-2023-51470 WordPress Rencontre – Dating Site Plugin <= 3.11.1 is vulnerable to PHP Object Injection

   Published 2023-12-29

   High·CVSS 8.8 EPSS 0.62%

   Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.11.1.

3. CVE-2019-13414 Rencontre – Dating Site <= 3.1.2 - Cross-Site Scripting

   Published 2019-07-08

   Medium·CVSS 6.1 EPSS 1.1%

   The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php.

4. CVE-2019-13413 Rencontre – Dating Site <= 3.1.2 - SQL Injection

   Published 2019-07-08

   Critical·CVSS 9.8 EPSS 2.2%

   The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.