Medium · 4.3 CVE-2025-47606 EUVD-2025-13771GHSA-qwhg-2332-j34c

WordPress Simple Giveaways plugin <= 2.49.0 - Cross Site Request Forgery (CSRF) vulnerability

Published May 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Igor Benic Product: Simple Giveaways

Description

Cross-Site Request Forgery (CSRF) vulnerability in Igor Benic Simple Giveaways giveasap allows Cross Site Request Forgery.This issue affects Simple Giveaways: from n/a through <= 2.49.0.

Affected products

Vendor	Product	Affected	Fixed
Igor Benic	Simple Giveaways	≤ 2.49.0	—

References

https://patchstack.com/database/Wordpress/Plugin/giveasap/vulnerability/wordpress-simple-giveaways-2-48-2-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry