Igor Benic vulnerabilities

8 vulnerabilities

Known vulnerabilities in Igor Benic products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.

Products

5
6.1CVE-2021-24298ibenicsimple_giveaways+2
EPSS score
3.45%
The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS
7.1CVE-2025-52742igor benicpets+1
EPSS score
0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through <= 1.4.1.
4.3CVE-2025-47606igor benicsimple giveaways+1
EPSS score
0.17%
Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways giveasap allows Cross Site Request Forgery.This issue affects Simple Giveaways: from n/a through <= 2.49.0.
8.5CVE-2025-30819igor benicsimple giveaways+1
EPSS score
0.46%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Igor Benic Simple Giveaways giveasap allows SQL Injection.This issue affects Simple Giveaways: from n/a through <= 2.48.1.
7.1CVE-2024-52483igor benicleanpress+1
EPSS score
0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic LeanPress leanpress allows Reflected XSS.This issue affects LeanPress: from n/a through <= 1.0.0.
8.5CVE-2026-57663igor benicrecipe maker for your food blog from zip recipes+1
EPSS score
0.36%
Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.
8.8CVE-2023-31086ibenicsimple_giveaways+2
EPSS score
0.30%
Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin <= 2.46.0 versions.
6.5CVE-2023-23893igor benicsimple giveaways+1
EPSS score
0.57%
Missing Authorization vulnerability in Igor Benic Simple Giveaways allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Giveaways: from n/a through 2.48.0.