CVE-2023-31086

Description

References

• patchstack.com/database/vulnerability/giveasap/wordpress-simple-giveaways-plugin-2-45-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

More vulnerabilities in simple giveaways

• CVE-2023-1122MEDIUM 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which could allow high privi…
• CVE-2023-1121MEDIUM 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege user…
• CVE-2023-1120MEDIUM 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege user…
• CVE-2021-24298MEDIUM 6.1The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, th…