Read the docs

RafflePress

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

RafflePress records in CISA KEV

No RafflePress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rafflepress 2 records MEDIUM Giveaways And Contests By Rafflepress 1 record MEDIUM

Records

1 record in Giveaways And Contests By Rafflepress · all components

TI-2023-00170 CVE-2023-0176 · GHSA-fqww-44f8-q7w7

Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS

Priority MEDIUM 58

The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 1.11.3
Open these records in search →