giveasap

WordPress · Plugin

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Simple Giveaways <= 2.48.2 - Cross-Site Request ForgeryCVE-2025-47606	giveasap	WordPress	Medium	No fix reported	2025-05-12
Simple Giveaways <= 2.48.1 - Authenticated (Contributor+) SQL InjectionCVE-2025-30819	giveasap	WordPress	Medium	Fix reported	2025-04-03
Simple Giveaways <= 2.45.0 - Authenticated(Admin+) Stored Cross-Site Scripting via form fieldsCVE-2023-1121	giveasap	WordPress	Medium	Fix reported	2024-01-22
Simple Giveaways <= 2.36.1 - Reflected Cross-Site ScriptingCVE-2021-24298	giveasap	WordPress	Medium	Fix reported	2024-01-22
Simple Giveaways <= 2.45.0 - Authenticated (Admin+) Stored Cross-Site Scripting via SettingsCVE-2023-1120	giveasap	WordPress	Medium	Fix reported	2024-01-22
Simple Giveaways <= 2.46 - Cross-Site Request ForgeryCVE-2023-31086	giveasap	WordPress	Medium	Fix reported	2024-01-22
Simple Giveaways <= 2.46.0 - Missing Authorization via AJAX actionsCVE-2023-23893	giveasap	WordPress	Medium	Fix reported	2024-01-22
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update	404-to-301 a-staff	WordPress	High	Fix reported	2024-01-22
Simple Giveaways <= 2.45.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Form, Prize, and Sharing Method FieldsCVE-2023-1122	giveasap	WordPress	Medium	Fix reported	2024-01-22