CVE-2023-5049

CVE-2023-5049 affects the Giveaways and Contests by RafflePress plugin for WordPress. The flaw is Stored XSS via the rafflepress/rafflepress_gutenberg shortcode, caused by insufficient input sanitization and output escaping on the giframe attribute. Authenticated attackers with contributor or hig...

CVE-2024-4745

CVE-2024-4745 affects the WordPress plugin Giveaways and Contests by RafflePress (versions up to 1.12.4). It is a Missing Authorization vulnerability (broken access control) with limited documented impact in the provided sources. The CVSS indicates Network attack, Low confidentiality/integ/availa...

CVE-2024-6887

The CVE-2024-6887 entry concerns the WordPress plugin Giveaways and Contests by RafflePress (versions prior to 1.12.16). The root cause is inadequate sanitisation/escaping of certain Giveaways settings, which could allow stored XSS when performed by high-privilege users (e.g., editors and above) ...

CVE-2024-10107

CVE-2024-10107 affects the WordPress plugin Giveaways and Contests by RafflePress (versions prior to 1.12.17). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by insufficient sanitisation/escaping of certain plugin settings, allowing high-privilege users (e.g., Admin) to inje...