akashmalik

Products

Exploited and recent CVEs

  • CVE-2024-13316 Medium 5.3 Scratch & Win – Giveaways and Contests <= 2.8.0 - Missing Authorization to Unauthenticated Coupon Creation 0.4%
  • CVE-2024-12545 Medium 5.4 Scratch & Win – Giveaways and Contests <= 2.7.1 - Cross-Site Request Forgery via reset_installation Function 0.2%
  • CVE-2024-11898 Medium 6.4 Scratch & Win – Giveaways and Contests <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%