exploitDog

CVE-2025-49997

Опубликовано: 20 июн. 2025

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.17.

Ссылки

https://patchstack.com/database/wordpress/plugin/rafflepress/vulnerability/wordpress-giveaways-and-contests-by-rafflepress-plugin-1-12-17-broken-access-control-vulnerability?_s_id=cve

EPSS

Процентиль: 11%

0.00039

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-x2gv-xg7r-vx8g

CVSS3: 5.3

github

8 месяцев назад

Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Giveaways and Contests by RafflePress: from n/a through 1.12.17.

EPSS

Процентиль: 11%

0.00039

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-862