WordPress plugin
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium10
- Low0
All Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.12.19Update to 1.12.21 | CVE-2025-12484 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.12.5Update to 1.12.7 | CVE-2024-1935 | |
| High7.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ≤1.11.2Update to 1.11.3 | CVE-2023-0176 |
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.12.19Update to 1.12.21
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.12.5Update to 1.12.7
- High7.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤1.11.2Update to 1.11.3
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers: common questions
Does Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers: 3 high, 10 medium. None are known to affect version null.
How do I check which version of Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerability?
CVE-2026-97317, published Sep 30, 2026: Giveaways and Contests by RafflePress <= 1.12.26 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerability listed in CISA KEV?
No. None of the known Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers vulnerabilities is currently listed in the CISA KEV catalog.