WordPress plugin
Contests by Rewards Fuel security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium3
- Low0
All Contests by Rewards Fuel vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.0.65Update to 2.0.66 | CVE-2024-12513 | |
| Medium5.4 | Cross-Site Request Forgery to Stored Cross-Site Scripting ≤2.0.62Update to 2.0.63 | CVE-2024-1785 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via update_rewards_fuel_api_key ≤2.0.64Update to 2.0.65 | CVE-2024-1787 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.0.65Update to 2.0.66
- Medium5.4Cross-Site Request Forgery to Stored Cross-Site Scripting
≤2.0.62Update to 2.0.63
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via update_rewards_fuel_api_key
≤2.0.64Update to 2.0.65
Contests by Rewards Fuel: common questions
Does Contests by Rewards Fuel have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Contests by Rewards Fuel: 3 medium. None are known to affect version null.
How do I check which version of Contests by Rewards Fuel I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Contests by Rewards Fuel vulnerability?
CVE-2024-12513, published Dec 17, 2024: Contests by Rewards Fuel <= 2.0.65 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Contests by Rewards Fuel vulnerability listed in CISA KEV?
No. None of the known Contests by Rewards Fuel vulnerabilities is currently listed in the CISA KEV catalog.