Vulnerabilities and Security Researches

Security report for CVE Simple Giveaways – Grow your business, email lists and traffic with contests > CVE-2023-23893

CVE, Research URL: CVE-2023-23893
Home page URL: Security reports for Simple Giveaways – Grow your business, email lists and traffic with contests
Application: Simple Giveaways – Grow your business, email lists and traffic with contests
Published on: -
Research Description: The Simple Giveaways plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on several AJAX actions in versions up to, and including, 2.46.0. This makes it possible for unauthenticated attackers to perform unauthorized actions allowing them to see available giveaways, save plugin settings, end giveaways and select winners among other things.
Affected versions: Min -, max 2.46.0.
Status: vulnerable