4.3 Medium

CVE-2025-66064 Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Cross Site Request Forgery.This issue affects Giveaways and Contests by RafflePress: from n/a through <= 1.12.20.

Affected products and versions

Product	Affected versions	Fixed in
Giveaways and Contests by RafflePress 1.12	earliest → 1.12.20	No fix stated

The 2 CVEs of Giveaways and Contests by RafflePress →

CVE-2025-49997 Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing… 5.3 Medium

Do you use Giveaways and Contests by RafflePress?

Track this CVE Watch Giveaways and Contests by RafflePress Check my SBOMs

www.cveye.io/en/cve/CVE-2025-66064

Timeline

Published November 21, 2025
Last modified April 28, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2025-66064 Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress…

Description

Affected products and versions

Other CVEs of Giveaways and Contests by RafflePress