VYPR

Giveaway

by WordPress

CVEs (1)

  • CVE-2021-24497HigAug 23, 2021
    risk 0.47cvss 7.2epss 0.01

    The Giveaway WordPress plugin through 1.2.2 is vulnerable to an SQL Injection issue which allows an administrative user to execute arbitrary SQL commands via the $post_id on the options.php page.