CVE-2024-10924

🗓️ 15 Nov 2024 04:15:03Reported by [email protected]Type

The Really Simple Security plugins for WordPress are vulnerable to authentication bypass due to improper user check error handling, allowing unauthenticated attackers to log in as any existing user

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	25 Jun 202518:50	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	23 Feb 202508:47	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	14 Nov 202416:59	–	githubexploit
GithubExploit	Exploit for Use of Hard-coded Credentials in Mariazevedo88 Travels-Java-Api	27 Nov 202411:19	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	11 Mar 202514:06	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	18 Nov 202420:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	22 Jan 202620:01	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	3 Dec 202413:09	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	5 Feb 202512:04	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security	14 Feb 202513:42	–	githubexploit

NVD

Node

really-simple-plugins really_simple_securityRange9.0.0–9.1.2-wordpress

really-simple-plugins really_simple_securityRange9.0.0–9.1.2prowordpress

really-simple-plugins really_simple_securityRange9.0.0–9.1.2pro_multisitewordpress

Source	Link
wordfence	www.wordfence.com/blog/2024/11/really-simple-security-vulnerability/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7d5d05ad-1a7a-43d2-bbbf-597e975446be
plugins	www.plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php
plugins	www.plugins.trac.wordpress.org/changeset/3188431/really-simple-ssl
plugins	www.plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php
github	www.github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-10924
plugins	www.plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php

17 Jun 2026 06:56Current

CVSS 3.19.8

EPSS0.81722