CVE-2025-49997: Syed Balkhi Giveaways And Contests By Rafflepress

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Giveaways and Contests by RafflePress: from n/a through <= 1.12.18.

Affected products

• Syed Balkhi Giveaways And Contests By Rafflepress: up to and including 1.12.18

Published 2025-06-20. Last modified 2026-06-17.