5.3
Medium
CVE-2026-25023 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests,…
Description
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Retrieve Embedded Sensitive Data.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through <= 2.0.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Run Contests, Raffles, and Giveaways with ContestsWP 2.0 | earliest → 2.0.7 | No fix stated |
Other CVEs of Run Contests, Raffles, and Giveaways with ContestsWP
The 4 CVEs of Run Contests, Raffles, and Giveaways with ContestsWP →
CVE-2025-32634
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mdedev Run…
7.1
High
CVE-2024-11456
The Run Contests, Raffles, and Giveaways with ContestsWP plugin for WordPress is vulnerable to Reflected Cross-Site…
6.1
Medium
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Medium