CVE-2026-97318

{
  "etk_id": "ETK-2026-560",
  "cve_id": "CVE-2026-97318",
  "display_id": "CVE-2026-97318",
  "ghsa_id": "GHSA-9949-jq7q-8g48",
  "euvd_id": "EUVD-2026-91197",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Open redirect in RafflePress giveaway links",
  "summary": "Giveaways and Contests by RafflePress versions earlier than 1.12.27 improperly validate giveaway parent-page URLs. An unauthenticated attacker can cause the site's giveaway confirmation and referral links to redirect visitors to an external site when the affected plugin and giveaway links are in use.",
  "mitigation": "Update Giveaways and Contests by RafflePress to version 1.12.27 or later. Review giveaway parent-page URL settings after updating and remove unexpected external destinations.",
  "vendor": null,
  "product": "Giveaways and Contests by RafflePress",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 1.12.27"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.12.27"
      ],
      "package_name": "Giveaways and Contests by RafflePress",
      "purl": null
    }
  ],
  "cwes": [
    601
  ],
  "cvss_score": 6.1,
  "cvss_src": "nvd",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "epss_score": 0.0015,
  "epss_percentile": 0.0343,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 23.521236766666668,
  "t0_at": "2026-10-02T06:00:27.170000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-04T14:08:17.606881+00:00",
      "days": 2.3387782046412036,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T06:00:27.170000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-02T06:00:27.170000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-02T06:00:27.170000+00:00",
      "url": "https://github.com/advisories/GHSA-9949-jq7q-8g48"
    }
  }
}