WordPress plugin
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤4.6.3Update to 4.6.4 | CVE-2026-97297 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤4.3.4Update to 4.3.5 | CVE-2024-29798 |
- Medium4.3Missing Authorization
≤4.6.3Update to 4.6.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.3.4Update to 4.3.5
Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program: common questions
Does Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program: 2 medium. None are known to affect version null.
How do I check which version of Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program vulnerability?
CVE-2026-97297, published Oct 1, 2026: Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program <= 4.6.3 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program vulnerability listed in CISA KEV?
No. None of the known Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program vulnerabilities is currently listed in the CISA KEV catalog.