Simple Giveaways – Grow your business, email lists and traffic with contests

Vulnerabilities 15Slug giveasapLatest version 2.49.0WordPress.org →

Minimum safe version

2.48.2

Update to 2.48.2 or later to address 14 fixable vulnerabilities

Latest available2.49.0 ✓⚠ 1 vulnerability has no fix
Medium 4.3 Unfixed
2025-05-07≤ 2.49.0

WordPress Simple Giveaways plugin <= 2.49.0 - Cross Site Request Forgery (CSRF) vulnerability

CVEEUVDWordfence
Medium 6.3
2024-10-16< 2.42.1

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE
N/A
2023-07-18< 2.46.1

WordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Scripting (XSS)

PatchstackWPScanCVE
Medium 4.8
2023-04-11< 2.45.1

WordPress Simple Giveaways Plugin < 2.45.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
Medium 4.8
2023-04-11< 2.45.1

WordPress Simple Giveaways Plugin < 2.45.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2019-02-25< 2.18.0

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Wordfence
N/A
2022-03-04< 2.42.1

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence
N/A
< 2.18.0

Freemius Library &lt; 2.2.4 - Subscriber+ Arbitrary Option Update

WPScan
N/A
2022-02-28< 2.42.1

WordPress Simple Giveaways plugin <= 2.42.0 - Sensitive Information Disclosure vulnerability

Patchstack
N/A
2022-02-28< 2.42.1

WordPress Simple Giveaways plugin <= 2.42.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack