Simple Giveaways – Grow your business, email lists and traffic with contests

Simple Giveaways – Grow your business, email lists and traffic with contests has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2025; 10 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (45%). Other recurring categories include Missing Authorization, Cross-Site Request Forgery (CSRF).

10 of the records (91%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

8 independent researchers contributed these findings, most of them (2) reported by Varun.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage91%
Open

1

Fixed

10

Get automatic notifications for all Simple Giveaways – Grow your business, email lists and traffic with contests vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-47606

Simple Giveaways <= 2.48.2 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

11 records
2025-05-07 00:00CVE-2025-47606
4.3
Medium
Nabil IrawanNo
2025-03-27 00:00CVE-2025-30819
6.5
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
2023-07-18 00:00CVE-2023-33999
6.1
Medium
Rafie MuhammadYes
2023-07-04 00:00CVE-2023-23893
6.5
Medium
Nguyen Anh TienYes
2023-04-24 00:00CVE-2023-31086
5.4
Medium
Kévin Mosbahi (Mika)Yes
2023-03-20 00:00CVE-2023-1120
4.4
Medium
ipatelsumitYes
2023-03-20 00:00CVE-2023-1121
4.4
Medium
VarunYes
2023-03-20 00:00CVE-2023-1122
5.5
Medium
VarunYes
2022-03-04 00:00CVE-2022-4974
6.3
Medium
AnonymousYes
2021-05-09 00:00CVE-2021-24298
6.1
Medium
Shreya PohekarYes
Showing 1–10 of 11 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C