CVE-2023-31086

Description

References

• patchstack.com/database/vulnerability/giveasap/wordpress-simple-giveaways-plugin-2-45-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Weitere Schwachstellen in simple giveaways

• CVE-2023-1122MITTEL 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which could allow high privi…
• CVE-2023-1121MITTEL 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege user…
• CVE-2023-1120MITTEL 4.8The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege user…
• CVE-2021-24298MITTEL 6.1The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, th…