CVE-2019-13413

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Rencontre plugin before 3.1.3 for WordPress allows SQL Injection via inc/rencontre_widget.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-134146.1The Rencontre plugin before 3.1.3 for WordPress allows XSS via inc/rencontre_widget.php.CVE-2019-134156.5Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users can gain read access to dataCVE-2019-134166.5Search Guard versions before 24.3 had an issue when Cross Cluster Search (CCS) was enabled, authenticated users are always authorized on theCVE-2019-134175.3Search Guard versions before 24.0 had an issue that field caps and mapping API leak field names (but not values) for fields which are not alCVE-2019-134187.5Search Guard versions before 24.0 had an issue that values of string arrays in documents are not properly anonymized.CVE-2019-134197.5Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.CVE-2019-13427.8An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error RCVE-2019-134205.9Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.CVE-2019-134214.9Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configuCVE-2019-134226.1Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially CVE-2019-134238.8Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kCVE-2019-13436.5A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. T