CVE-2024-12545

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to missing nonce validation on the resetinstallation function...

CVE-2024-12545

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to missing nonce validation on the resetinstallation function...

CVE-2024-12545

creationtimestamp| type| source ---|---|--- 2025-01-04 07:26:19+00:00| seen| https://infosec.exchange/users/cve/statuses/113768895264374934 2025-01-04 09:44:27+00:00| seen| https://t.me/cvedetector/14266 2025-09-03 13:30:06+00:00| seen| MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7...

CVE-2024-12545

CVE-2024-12545: Scratch & Win – Giveaways and Contests (WordPress) is vulnerable to Cross-Site Request Forgery in all versions up to 2.7.1 due to missing nonce validation in reset_installation(); unauthenticated attackers could trigger a forged request to reset the plugin’s installation if a site...