WordPress plugin
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium4
- Low0
All Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤3.0.2Update to 3.1.0 | CVE-2026-97303 | |
| Medium5.3 | Missing Authorization to Unauthenticated Coupon Creation ≤2.8.0Update to 2.9.0 | CVE-2024-13316 | |
| Medium5.4 | Cross-Site Request Forgery via reset_installation Function ≤2.7.1Update to 2.8.0 | CVE-2024-12545 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.6.9Update to 2.7.0 | CVE-2024-11898 |
- Medium4.3Missing Authorization
≤3.0.2Update to 3.1.0
- Medium5.3Missing Authorization to Unauthenticated Coupon Creation
≤2.8.0Update to 2.9.0
- Medium5.4Cross-Site Request Forgery via reset_installation Function
≤2.7.1Update to 2.8.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.6.9Update to 2.7.0
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more: common questions
Does Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more: 4 medium. None are known to affect version null.
How do I check which version of Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more vulnerability?
CVE-2026-97303, published Oct 3, 2026: Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more <= 3.0.2 - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more vulnerability listed in CISA KEV?
No. None of the known Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more vulnerabilities is currently listed in the CISA KEV catalog.