Igor Benic vulnerabilities
8 vulnerabilities
Known vulnerabilities in Igor Benic products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Simple Giveaways3 vulnerabilities
- Simple Giveaways – Grow Your Business, Email Lists And Traffic With Contests2 vulnerabilities
- Leanpress1 vulnerabilities
- Pets1 vulnerabilities
- Recipe Maker For Your Food Blog From Zip Recipes1 vulnerabilities
CVE-2021-24298ibenicsimple_giveaways+2
EPSS score3.45%
The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSSCVE-2025-52742igor benicpets+1EPSS score0.25%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic Pets pets allows Reflected XSS.This issue affects Pets: from n/a through <= 1.4.1.CVE-2025-47606igor benicsimple giveaways+1EPSS score0.17%
Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways giveasap allows Cross Site Request Forgery.This issue affects Simple Giveaways: from n/a through <= 2.49.0.CVE-2025-30819igor benicsimple giveaways+1EPSS score0.46%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Igor Benic Simple Giveaways giveasap allows SQL Injection.This issue affects Simple Giveaways: from n/a through <= 2.48.1.CVE-2024-52483igor benicleanpress+1EPSS score0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Benic LeanPress leanpress allows Reflected XSS.This issue affects LeanPress: from n/a through <= 1.0.0.CVE-2026-57663igor benicrecipe maker for your food blog from zip recipes+1EPSS score0.36%
Contributor SQL Injection in Recipe Maker For Your Food Blog from Zip Recipes <= 8.2.7 versions.CVE-2023-31086ibenicsimple_giveaways+2EPSS score0.30%
Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests plugin <= 2.46.0 versions.CVE-2023-23893igor benicsimple giveaways+1EPSS score0.57%
Missing Authorization vulnerability in Igor Benic Simple Giveaways allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Giveaways: from n/a through 2.48.0.