54 matches found
CVE-2026-97318
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
CVE-2026-97317
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not remove the reCAPTCHA secret key from the giveaway settings it embeds in public giveaway pages, allowing unauthenticated visitors to retrieve the secret key of any active giveaway that has reCAPTCHA configured...
CVE-2026-97318 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
EUVD-2026-91197
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
CVE-2026-97318
The Giveaways and Contests by RafflePress WordPress plugin versions prior to 1.12.27 is vulnerable to an unauthenticated stored open redirect . The flaw exists because the plugin fails to properly validate the parent page URL of a giveaway before saving it. An attacker can exploit this to manipul...
WordPress Giveaways and Contests by RafflePress plugin < 1.12.27 - Unauthenticated Stored Open Redirect vulnerability
Unauthenticated Stored Open Redirect vulnerability discovered by Dick Snel in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.27...
CVE-2026-97317
The Giveaways and Contests by RafflePress WordPress plugin (versions before 1.12.27 ) is vulnerable to an unauthenticated reCAPTCHA Secret Key Disclosure . The plugin fails to remove the reCAPTCHA secret key from the giveaway settings it embeds in public giveaway pages. This flaw allows unauthent...
WordPress Giveaways and Contests by RafflePress plugin < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure vulnerability
Unauthenticated reCAPTCHA Secret Key Disclosure vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Giveaways and Contests by RafflePress versions 1.12.27...
CVE-2026-97317 Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not remove the reCAPTCHA secret key from the giveaway settings it embeds in public giveaway pages, allowing unauthenticated visitors to retrieve the secret key of any active giveaway that has reCAPTCHA configured...
PT-2026-104094
The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors to it, allowing unauthenticated attackers to make the site's own giveaway confirmation and referral links redirect...
WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Giveaways and Contests by RafflePress versions = 1.12.20...
EUVD-2025-198477
Cross-Site Request Forgery CSRF vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Cross Site Request Forgery.This issue affects Giveaways and Contests by RafflePress: from n/a through = 1.12.20...
CVE-2025-66064: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Cross Site Request Forgery.This issue affects Giveaways and Contests by RafflePress: from n/a through = 1.12.20...
WordPress plugin Giveaways and Contests by RafflePress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
CVE-2025-12484
The Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple social media username parameters in all versions up to, and including, 1.12.19 due to insufficient input...
CVE-2025-12484: Improper Neutralization of Input During Web Page Generation
The Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple social media username parameters in all versions up to, and including, 1.12.19 due to insufficient input...
PT-2025-47444
Name of the Vulnerable Software and Affected Versions RafflePress versions up to and including 1.12.19 Description The Giveaways and Contests by RafflePress plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows...
WordPress Giveaways and Contests by RafflePress plugin <= 1.12.19 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin Giveaways and Contests by RafflePress versions = 1.12.19...