WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers

The best WordPress giveaway plugin. Grow your email list, website traffic, and social media followers with viral contests, giveaways, and sweepstakes.

10Reported vulnerabilities
7.2Highest CVSS score
1.12.24Latest version
20,000+Active installs

What to do now

Update Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers to 1.12.21 or later. 10 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 27, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2024-3963 Medium 6.5 0.5% Before 1.12.14 1.12.14 July 13, 2024
CVE-2024-10107 Medium 4.8 0.3% Before 1.12.17 1.12.17 May 15, 2025
CVE-2024-6887 Medium 4.8 0.4% Before 1.12.16 1.12.16 September 12, 2024
CVE-2025-12484 High 7.2 0.3% 0 to 1.12.19 (inclusive) 1.12.21 November 19, 2025
CVE-2024-1935 Medium 6.1 0.7% Before 1.12.7 1.12.7 March 13, 2024
CVE-2023-5049 Medium 5.4 0.5% 1.12.0 and earlier 1.12.2 October 30, 2023
CVE-2025-49997 Medium 5.3 0.3% 1.12.18 and earlier 1.12.19 June 19, 2025
CVE-2024-32827 Medium 5.3 0.4% 1.12.7 and earlier 1.12.11 April 22, 2024
CVE-2025-66064 Medium 4.3 0.1% 1.12.20 and earlier 1.12.21 November 21, 2025
CVE-2024-4745 Medium 4.3 0.3% 1.12.4 and earlier 1.12.5 May 10, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.