CVE-2026-97303

Apps Mav Scratch & Win – Giveaways and Contests

Published 5 Oct 2026 · updated 5 Oct 2026 · Received

7.6 High · CVSS 3.1, patchstack.com

Description

Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Scratch & Win – Giveaways and Contests: from n/a through 3.0.2.

References

patchstack.com/database/wordpress/plugin/scratch-win-giveaways-for-website-facebook/vulnerability/wordpress-scratch-win-giveaways-and-contests-plugin-3-0-2-broken-access-control-vulnerability?_s_id=cve