# Syed Balkhi Giveaways and Contests by RafflePress.

Every CVE that names Syed Balkhi Giveaways and Contests by RafflePress among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-66064.md)
  `CVE-2025-66064` · CVE record: Syed Balkhi Giveaways and Contests by RafflePress · CVSS 4.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: Cross-site request forgery (CSRF)
- [WordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF Vulnerability](https://agentprime.io/advisories/CVE-2025-49997.md)
  `CVE-2025-49997` · CVE record: Syed Balkhi Giveaways and Contests by RafflePress · CVSS 5.3 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=syed-balkhi-giveaways-and-contests-by-rafflepress>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/syed-balkhi-giveaways-and-contests-by-rafflepress/>. Everything for agents: <https://agentprime.io/llms.txt>.