Extension WordPress

Vulnérabilités Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more

Cette page rassemble les failles publiées pour Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more

3 fiches

CVE-2024-13316 Moyenne · 5,3
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more

Scratch & Win – Giveaways and Contests <= 2.8.0 – Missing Authorization to Unauthenticated Coupon Creation

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the apmswn_create_discount() function in all versions…

Versions affectées

*-2.8.0

Correctif

2.9.0

Publication

17/02/2025

CVE-2024-12545 Moyenne · 5,4
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more

Scratch & Win – Giveaways and Contests <= 2.7.1 – Cross-Site Request Forgery via reset_installation Function

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to…

Versions affectées

*-2.7.1

Correctif

2.8.0

Publication

03/01/2025

CVE-2024-11898 Moyenne · 6,4
Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more

Scratch & Win – Giveaways and Contests <= 2.6.9 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swin-campaign' shortcode in all versions up to, and including,…

Versions affectées

*-2.6.9

Correctif

2.7.0

Publication

02/12/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités