Rafflepress Giveaways And Contests By Rafflepress vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rafflepress Giveaways And Contests By Rafflepress, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.3MediumCVE-2024-4745rafflepress · giveaways_and_contests_by_rafflepress +2 moreWordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerabilityMissing Authorization vulnerability in RafflePress Giveaways and Contests by RafflePress.This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.4.EPSS0.25%7.4HighCVE-2023-0176rafflepress · giveaways_and_contests_by_rafflepress +2 moreGiveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSSThe Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.EPSS0.57%