Giveaways And Contests By Rafflepress (Unknown) - vulnerabilities (CVEs)

6 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-02. Vendor: Unknown.

CVEs of Giveaways And Contests By Rafflepress

• CVE-2026-97318 - CVSS 6.1 (medium), 2026-10-02: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later…
• CVE-2026-97317 - CVSS 5.3 (medium), 2026-10-02: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not remove the reCAPTCHA secret key from the giveaway settings it embeds in…
• CVE-2024-10107 - CVSS 4.8 (medium), 2025-05-15: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.17 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2024-6887 - CVSS 4.8 (medium), 2024-09-12: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Giveaways settings, which could allow high…
• CVE-2024-3963 - CVSS 6.5 (medium), 2024-07-13: The Giveaways and Contests by RafflePress WordPress plugin before 1.12.14 does not sanitise and escape some parameters, which could allow users with a role as…
• CVE-2023-0176 - CVSS 5.4 (medium), 2023-02-06: The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortcode attributes before outputting them…