Advisories · Technology

Giveaways and Contests by RafflePress.

Every CVE that names Giveaways and Contests by RafflePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97318 CVE record

CVSS 6.1 Medium

Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter
- Giveaways and Contests by RafflePress
- Open redirect
Not analysed yet 2 Oct 2026
CVE-2026-97317 CVE record

CVSS 5.3 Medium

Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page
- Giveaways and Contests by RafflePress
- Information disclosure
Not analysed yet 2 Oct 2026
CVE-2024-10107 CVE record

CVSS 4.8 Medium

Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS
- Giveaways and Contests by RafflePress
Not analysed yet 15 May 2025
CVE-2024-6887 CVE record

CVSS 4.8 Medium

Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS
- Giveaways and Contests by RafflePress
Not analysed yet 12 Sept 2024
CVE-2024-3963 CVE record

CVSS 6.5 Medium

RafflePress Lite < 1.12.14 - Editor+ Stored XSS
- Giveaways and Contests by RafflePress
Not analysed yet 13 Jul 2024
CVE-2024-4745 CVE record

CVSS 4.3 Medium

WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability
- Giveaways and Contests by RafflePress
- Broken access control
Not analysed yet 10 Jun 2024
CVE-2023-0176 CVE record

CVSS 5.4 Medium

Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS
- Giveaways and Contests by RafflePress
Not analysed yet 6 Feb 2023