WordPress plugin
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium10
- Low0
All Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure ≤1.12.26Update to 1.12.27 | CVE-2026-97317 | |
| Medium4.7 | Unauthenticated Open Redirect ≤1.12.26Update to 1.12.27 | CVE-2026-97318 | |
| Medium4.3 | Cross-Site Request Forgery ≤1.12.20Update to 1.12.21 | CVE-2025-66064 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.12.19Update to 1.12.21 | CVE-2025-12484 | |
| Medium5.3 | Missing Authorization ≤1.12.18Update to 1.12.19 | CVE-2025-49997 | |
| Medium4.4 | Authenticated (Admin+) Stored Cross-Site Scripting ≤1.12.16Update to 1.12.17 | CVE-2024-10107 | |
| Medium4.4 | Authenticated (Editor+) Stored Cross-Site Scripting ≤1.12.16Update to 1.12.17 | CVE-2024-6887 | |
| Medium4.4 | Authenticated (Editor+) Stored Cross-Site Scripting ≤1.12.13Update to 1.12.14 | CVE-2024-3963 | |
| Medium4.3 | Missing Authorization ≤1.12.4Update to 1.12.5 | CVE-2024-4745 | |
| Medium5.3 | Unauthenticated IP Spoofing ≤1.12.7Update to 1.12.11 | CVE-2024-32827 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.12.5Update to 1.12.7 | CVE-2024-1935 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤1.12.0Update to 1.12.2 | CVE-2023-5049 | |
| High7.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤1.11.2Update to 1.11.3 | CVE-2023-0176 |
- Medium5.3Unauthenticated Information Exposure
≤1.12.26Update to 1.12.27
- Medium4.7Unauthenticated Open Redirect
≤1.12.26Update to 1.12.27
- Medium4.3Cross-Site Request Forgery
≤1.12.20Update to 1.12.21
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.12.19Update to 1.12.21
- Medium5.3Missing Authorization
≤1.12.18Update to 1.12.19
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤1.12.16Update to 1.12.17
- Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
≤1.12.16Update to 1.12.17
- Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
≤1.12.13Update to 1.12.14
- Medium4.3Missing Authorization
≤1.12.4Update to 1.12.5
- Medium5.3Unauthenticated IP Spoofing
≤1.12.7Update to 1.12.11
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.12.5Update to 1.12.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.12.0Update to 1.12.2
- High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.11.2Update to 1.11.3
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers: common questions
Does Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers: 3 high, 10 medium. None are known to affect version null.
How do I check which version of Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerability?
CVE-2026-97317, published Sep 30, 2026: Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerability listed in CISA KEV?
No. None of the known Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerabilities is currently listed in the CISA KEV catalog.