Vulnerabilities of the plugins Really Simple Security Free, Really Simple Security Pro, and Really Simple Security Pro Multisite of the WordPress content management system, which allow attackers to increase their privileges.

🗓️ 18 Nov 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Vulnerabilities in Really Simple Security plugins allow privilege escalation via authentication flaws in WordPress.

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	25 Jun 202518:50	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	23 Feb 202508:47	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	14 Nov 202416:59	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Mariazevedo88 Travels-Java-Api	27 Nov 202411:19	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	11 Mar 202514:06	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	18 Nov 202420:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	22 Jan 202620:01	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	3 Dec 202413:09	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	5 Feb 202512:04	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	14 Feb 202513:42	–	githubexploit

Vulners

Node

wordpress really-simple-sslRange9.0.0–9.1.1.1

OR

wordpress really-simple-ssl-proRange9.0.0–9.1.1.1

OR

wordpress really-simple-ssl-pro-multisiteRange9.0.0–9.1.1.1

Source	Link
securityonline	www.securityonline.info/cve-2024-10924-cvss-9-8-authentication-bypass-in-really-simple-security-plugin-affects-4-million-sites/
tenable	www.tenable.com/cve/CVE-2024-10924
vuldb	www.vuldb.com/ru/
patchstack	www.patchstack.com/articles/critical-account-takeover-patched-in-really-simple-security-plugin/
plugins	www.plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php
web	www.web.nvd.nist.gov/view/vuln/detail

18 Nov 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 39.8

CVSS 210

EPSS0.81722

WordPress plugins vulnerabilities Really Simple Security Privilege escalation Authentication flaws