Bdthemes Spin Wheel – Interactive Spinning Wheel That Offers Coupons vulnerabilities

1 vulnerability

Known vulnerabilities in Bdthemes Spin Wheel – Interactive Spinning Wheel That Offers Coupons, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2026-0808bdthemesspin wheel – interactive spinning wheel that offers coupons+1
EPSS score
0.36%
The Spin Wheel plugin for WordPress is vulnerable to client-side prize manipulation in all versions up to, and including, 2.1.0. This is due to the plugin trusting client-supplied prize selection data without server-side validation or randomization. This makes it possible for unauthenticated attackers to manipulate which prize they win by modifying the 'prize_index' parameter sent to the server, allowing them to always select the most valuable prizes.