CVE-2025-12484

The Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple social media username parameters in all versions up to, and including, 1.12.19 due to insufficient input...

CVE-2025-12484 Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.19 - Unauthenticated Stored Cross-Site Scripting

The Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple social media username parameters in all versions up to, and including, 1.12.19 due to insufficient input...

CVE-2025-12484

CVE-2025-12484 affects the WordPress plugin “Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers.” The Connected WordFence report confirms an unauthenticated Stored Cross-Site Scripting (XSS) vulnerability arising from insufficient input sanit...

PT-2025-47444

Name of the Vulnerable Software and Affected Versions RafflePress versions up to and including 1.12.19 Description The Giveaways and Contests by RafflePress plugin for WordPress is susceptible to Stored Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows...

WordPress Giveaways and Contests by RafflePress plugin <= 1.12.19 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin Giveaways and Contests by RafflePress versions = 1.12.19...

Linux Distros Unpatched Vulnerability : CVE-2016-6233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 order and 2 group methods in ZendDbSelect in the Zend Framework before 1.12.19 might allow remote attackers to conduct SQL injection attacks via vectors...

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2025-45855

An active CVE exists for erupt v1.12.19: arbitrary file upload in the /upload/GoodsCategory/image component can lead to code execution. The root cause is an unsecured upload endpoint that accepts crafted files, enabling an attacker to execute arbitrary code on the host. MITRE/attack details are n...