https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13316.htmlhttps://patchthecve.com/cve/CVE-2024-13316.htmlWed, 17 Jun 2026 07:01:46 +0000MEDIUM 5.3: The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the apmswn_create_discount() function in all versions up to, and including, 2.8.0. This makhttps://patchthecve.com/cve/CVE-2024-12545.htmlhttps://patchthecve.com/cve/CVE-2024-12545.htmlWed, 17 Jun 2026 06:59:55 +0000MEDIUM 5.4: The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to missing nonce validation on the reset_installation() functionhttps://patchthecve.com/cve/CVE-2024-11898.htmlhttps://patchthecve.com/cve/CVE-2024-11898.htmlWed, 17 Jun 2026 06:58:40 +0000MEDIUM 6.4: The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'swin-campaign' shortcode in all versions up to, and including, 2.6.9 due to insufficient input sanitiz