CVE-2025-14462

Name of the Vulnerable Software and Affected Versions The Lucky Draw Contests plugin for WordPress versions prior to 4.3

Description The software is susceptible to Cross-Site Request Forgery (CSRF). This is a result of inadequate or absent nonce validation in the misc-settings.php file. An unauthenticated attacker can potentially modify plugin settings by deceiving a site administrator into performing an action, such as clicking a malicious link.

Recommendations Update The Lucky Draw Contests plugin to version 4.3 or later.