Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
rafflepress
WordPress
· Plugin
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Open Redirect
CVE-2026-97318
rafflepress
WordPress
Medium
Fix reported
2026-10-09
Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure
CVE-2026-97317
rafflepress
WordPress
Medium
Fix reported
2026-10-09
Giveaways and Contests by RafflePress <= 1.12.16 - Authenticated (Editor+) Stored Cross-Site Scripting
CVE-2024-6887
rafflepress
WordPress
Medium
Fix reported
2026-09-04
Giveaways and Contests by RafflePress <= 1.12.18 - Missing Authorization
CVE-2025-49997
rafflepress
WordPress
Medium
Fix reported
2026-01-28
Giveaways and Contests by RafflePress <= 1.12.20 - Cross-Site Request Forgery
CVE-2025-66064
rafflepress
WordPress
Medium
Fix reported
2025-11-25
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.19 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-12484
rafflepress
WordPress
High
Fix reported
2025-11-19
Giveaways and Contests by RafflePress <= 1.12.16 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2024-10107
rafflepress
WordPress
Medium
Fix reported
2025-04-15
Giveaways and Contests by RafflePress <= 1.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-0176
rafflepress
WordPress
High
Fix reported
2024-10-23
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers <= 1.12.13 - Authenticated (Editor+) Stored Cross-Site Scripting
CVE-2024-3963
rafflepress
WordPress
Medium
Fix reported
2024-08-09
Giveaways and Contests by RafflePress <= 1.12.5 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-1935
rafflepress
WordPress
High
Fix reported
2024-05-31
Giveaways and Contests by RafflePress <= 1.12.4 - Missing Authorization
CVE-2024-4745
rafflepress
WordPress
Medium
Fix reported
2024-05-15
Giveaways and Contests by RafflePress <= 1.12.7 - Unauthenticated IP Spoofing
CVE-2024-32827
rafflepress
WordPress
Medium
Fix reported
2024-04-29
Giveaways and Contests by RafflePress <= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2023-5049
rafflepress
WordPress
Medium
Fix reported
2024-01-22