Plugin icon

Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

rafflepress

Vulnerabilities:

11

Last Updated:

April 16, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2025-11-21
Title
Giveaways and Contests by RafflePress < 1.12.21 - Cross-Site Request Forgery
Fixed in
Fixed in 1.12.21
CVSS
4.3 (medium)
Published
2025-11-18
Title
Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers < 1.12.21 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.12.21
CVSS
7.2 (high)
Published
2025-06-19
Title
Giveaways and Contests by RafflePress < 1.12.19 - Missing Authorization
Fixed in
Fixed in 1.12.19
CVSS
5.3 (medium)
Published
2024-09-24
Title
Giveaways and Contests by RafflePress < 1.12.17 - Admin+ Stored XSS
Fixed in
Fixed in 1.12.17
CVSS
3.5 (low)
Published
2024-08-22
Title
Giveaways and Contests by RafflePress < 1.12.16 - Editor+ Stored XSS
Fixed in
Fixed in 1.12.16
CVSS
3.5 (low)
Published
2024-06-22
Title
RafflePress Lite < 1.12.14 - Editor+ Stored XSS
Fixed in
Fixed in 1.12.14
CVSS
3.5 (low)
Published
2024-05-10
Title
Giveaways and Contests by RafflePress < 1.12.5 - Missing Authorization
Fixed in
Fixed in 1.12.5
CVSS
4.3 (medium)
Published
2024-04-22
Title
Giveaways and Contests by RafflePress < 1.12.11 - IP Spoofing
Fixed in
Fixed in 1.12.11
CVSS
5.3 (medium)
Published
2024-02-29
Title
Giveaways and Contests by RafflePress < 1.12.7 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.12.7
CVSS
7.2 (high)
Published
2023-10-29
Title
Giveaways and Contests by RafflePress < 1.12.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.12.2
CVSS
6.4 (medium)
Published
2023-01-12
Title
Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS
Fixed in
Fixed in 1.11.3
CVSS
6.8 (medium)