What’s Vulnerable › Products

Giveaways and Contests by RafflePress vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Giveaways and Contests by RafflePress version is affected

Latest Giveaways and Contests by RafflePress vulnerabilities

• CVE-2026-97318 — Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter (CVSS 6.1)
• CVE-2026-97317 — Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page (CVSS 5.3)
• CVE-2024-10107 — Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-6887 — Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS (CVSS 4.8)
• CVE-2024-4745 — WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability (CVSS 6.3)
• CVE-2023-5049 — Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)