SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Security & Risk Analysis

wordpress.org/plugins/sweepwidget

The best free WordPress giveaway plugin for viral contests, sweepstakes, competitions, photo contests with voting, raffles, and instant coupons.

200 active installs v2.1.0 PHP 7.4+ WP 6.0+ Updated Jul 20, 2026
competitioncontestgiveawayphoto-contestsweepstakes
99
A · Safe
CVEs total1
Unpatched0
Last CVEJan 6, 2025
Safety Verdict

Is SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Safe to Use in 2026?

Generally Safe

Score 99/100

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Jan 6, 2025Updated 1mo ago
Risk Assessment

The sweepwidget plugin v2.0.8 exhibits a generally strong security posture based on the static analysis. The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and 100% proper output escaping are significant strengths. The plugin also demonstrates good practices by having a limited attack surface with only one entry point (a shortcode) and no identified cron events or file operations that could be easily exploited. Taint analysis showing zero unsanitized flows further reinforces this positive outlook.

Key Concerns

  • One medium severity CVE in history
  • External HTTP requests present
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
1 published

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Security Vulnerabilities

CVEs by Year

1 CVE in 2025
2025
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-11756medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

SweepWidget Contests, Giveaways, Photo Contests, Competitions <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jan 6, 2025 Patched in 2.0.7 (402d)
Version History

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Release Timeline

v2.1.0Current
v2.0.8
v2.0.7
v2.0.41 CVE
v2.0.31 CVE
v2.0.21 CVE
v2.0.11 CVE
v2.01 CVE
v1.0.41 CVE
v1.0.31 CVE
v1.0.21 CVE
Code Analysis
Analyzed Mar 16, 2026

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
66 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

100% escaped66 total outputs
Attack Surface

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[sweepwidget] sweepwidget.php:530
WordPress Hooks 3
actionadmin_menusweepwidget.php:33
actionadmin_initsweepwidget.php:36
actionadmin_enqueue_scriptssweepwidget.php:510
Maintenance & Trust

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 20, 2026
PHP min version7.4
Downloads11K

Community Trust

Rating86/100
Number of ratings14
Active installs200
Developer Profile

SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin Developer Profile

SweepWidget

1 plugin · 200 total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
402 days
View full developer profile
Detection Fingerprints

How We Detect SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/sweepwidget/sweepwidget.css/wp-content/plugins/sweepwidget/sweepwidget.js
Script Paths
/wp-content/plugins/sweepwidget/sweepwidget.js
Version Parameters
sweepwidget/sweepwidget.css?ver=sweepwidget/sweepwidget.js?ver=

HTML / DOM Fingerprints

CSS Classes
sweepwidget-wrappersweepwidget-embed
Data Attributes
data-sweepwidget-iddata-sweepwidget-widget-id
JS Globals
SWEEPWidget
Shortcode Output
[sweepwidget]
FAQ

Frequently Asked Questions about SweepWidget – Giveaway, Contest, Sweepstakes, Competition & Photo Contest Plugin