🔍 What is Rafflepress?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-10107

MEDIUM CVSS 4.8 May 15, 2025

This vulnerability in the RafflePress WordPress plugin allows administrators to inject malicious scripts into plugin settings, which then execute when other users view those settings. It affects WordP...

CVE-2024-6887

MEDIUM CVSS 4.8 Sep 12, 2024

The RafflePress WordPress plugin before version 1.12.16 has a stored cross-site scripting (XSS) vulnerability in its Giveaways settings. This allows authenticated users with editor-level privileges or...

CVE-2024-4745

MEDIUM CVSS 4.3 Jun 10, 2024

CVE-2024-4745 is a missing authorization vulnerability in the RafflePress WordPress plugin that allows unauthorized users to access functionality intended only for administrators. This affects all Wor...