Plugin: Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers
Versions: <= 1.12.20
CVSS: 4.3/10
Correctif: 1.12.21

21 nov. 2025

Lire

ÉlevéeCVSS 7.2

CVE-2025-12484

XSS stocké, non authentifié, dans Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers (<= 1.12.19)

Plugin: Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers
Versions: <= 1.12.19
CVSS: 7.2/10
Correctif: 1.12.21

Défaut de contrôle d'accès dans Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers (<= 1.12.18)

Plugin: Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers
Versions: <= 1.12.18
CVSS: 5.3/10
Correctif: 1.12.19

CSRF (Cross-Site Request Forgery) dans Simple Giveaways – Grow your business, email lists and traffic with contests (<= 2.48.2)

Plugin: Simple Giveaways – Grow your business, email lists and traffic with contests
Versions: <= 2.48.2
CVSS: 4.3/10
Correctif: Aucun

XSS réfléchi dans Run Contests, Raffles, and Giveaways with ContestsWP (<= 2.0.6)

Plugin: Run Contests, Raffles, and Giveaways with ContestsWP
Versions: <= 2.0.6
CVSS: 6.1/10
Correctif: Aucun

Injection SQL, authentifié (Contributeur+), dans Simple Giveaways – Grow your business, email lists and traffic with contests (<= 2.48.1)

Plugin: Simple Giveaways – Grow your business, email lists and traffic with contests
Versions: <= 2.48.1
CVSS: 6.5/10
Correctif: 2.48.2

XSS stocké, authentifié, dans Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers (<= 1.12.16)

Plugin: Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers
Versions: <= 1.12.16
CVSS: 4.4/10
Correctif: 1.12.17

Défaut de contrôle d'accès, non authentifié, dans Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more (<= 2.8.0)

Plugin: Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more
Versions: <= 2.8.0
CVSS: 5.3/10
Correctif: 2.9.0

XSS stocké, authentifié (Contributeur+), dans Giveaways and Contests by PromoSimple (<= 1.24)

Plugin: Giveaways and Contests by PromoSimple
Versions: <= 1.24
CVSS: 6.4/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans SweepWidget – Contests, Giveaways, Sweepstakes & Photo Contests (<= 2.0.6)

Plugin: SweepWidget – Contests, Giveaways, Sweepstakes & Photo Contests
Versions: <= 2.0.6
CVSS: 6.4/10
Correctif: 2.0.7

6 janv. 2025

Lire

1 – 12 sur 31 articles