PT-2026-104093
CVE-2026-97317
·
Published
2026-10-02
·
Updated
2026-10-02
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Giveaways and Contests by RafflePress versions prior to 1.12.27
Description
The plugin fails to remove the reCAPTCHA secret key from the giveaway settings embedded in public giveaway pages. This allows unauthenticated visitors to retrieve the secret key of any active giveaway that has reCAPTCHA configured.
Recommendations
Update Giveaways and Contests by RafflePress to version 1.12.27 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾