5.3 Medium

CVE-2025-49997 Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing…

Description

Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Giveaways and Contests by RafflePress: from n/a through <= 1.12.18.

Affected products and versions

Product	Affected versions	Fixed in
Giveaways and Contests by RafflePress 1.12	earliest → 1.12.18	No fix stated

The 2 CVEs of Giveaways and Contests by RafflePress →

CVE-2025-66064 Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress… 4.3 Medium

Do you use Giveaways and Contests by RafflePress?

Track this CVE Watch Giveaways and Contests by RafflePress Check my SBOMs

www.cveye.io/en/cve/CVE-2025-49997

Timeline

Published June 20, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-49997 Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing…

Description

Affected products and versions

Other CVEs of Giveaways and Contests by RafflePress