Advisories · Technology

Syed Balkhi Giveaways and Contests by RafflePress.

Every CVE that names Syed Balkhi Giveaways and Contests by RafflePress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-66064 CVE record

CVSS 4.3 Medium

WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerability
- Syed Balkhi Giveaways and Contests by RafflePress
- Cross-site request forgery (CSRF)
Not analysed yet 21 Nov 2025
CVE-2025-49997 CVE record

CVSS 5.3 Medium

WordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF Vulnerability
- Syed Balkhi Giveaways and Contests by RafflePress
- Broken access control
Not analysed yet 20 Jun 2025