Giveaways and Contests by RafflePress — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in Giveaways and Contests by RafflePress, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-97317	Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated reCAPTCHA Secret Key Disclosure via Giveaway Page	-	-	2026-10-02
CVE-2026-97318	Giveaways and Contests by RafflePress < 1.12.27 - Unauthenticated Stored Open Redirect via 'parent_url' Parameter	-	-	2026-10-02
CVE-2025-66064	WordPress Giveaways and Contests by RafflePress plugin <= 1.12.20 - Cross Site Request Forgery (CSRF) vulnerability CWE-352	4.3	Medium	2025-11-21
CVE-2025-49997	WordPress Giveaways and Contests by RafflePress plugin <= 1.12.18 - Broken Access Control + CSRF Vulnerability CWE-862	5.3	Medium	2025-06-20
CVE-2024-10107	Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS	4.8^AI	Medium ^AI	2025-05-15
CVE-2024-6887	Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS	4.8^AI	Medium ^AI	2024-09-12
CVE-2024-4745	WordPress Giveaways and Contests by RafflePress plugin <= 1.12.4 - Broken Access Control vulnerability CWE-862	4.3	Medium	2024-06-10
CVE-2023-0176	Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS	5.4	-	2023-02-06

All 8 known CVE vulnerabilities affecting Giveaways and Contests by RafflePress with full Chinese analysis, references, and POCs where available.