Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-25023 EUVD-2026-5260GHSA-4pmc-x99v-23p3

WordPress Run Contests, Raffles, and Giveaways with ContestsWP plugin <= 2.0.7 - Sensitive Data Exposure vulnerability

Published Feb 3, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in mdedev Run Contests, Raffles, and Giveaways with ContestsWP contest-code-checker allows Retrieve Embedded Sensitive Data.This issue affects Run Contests, Raffles, and Giveaways with ContestsWP: from n/a through <= 2.0.7.

Affected products

VendorProductAffectedFixed
mdedev Run Contests, Raffles, and Giveaways with ContestsWP ≤ 2.0.7 —

References