Lucene search
K

28 matches found

Nuclei
Nuclei
added 3 days ago50 views

Really Simple Security < 9.1.2 - Authentication Bypass

The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...

9.8CVSS7AI score0.93889EPSS
Exploits21References7
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.0 views

CVE-2026-32461

Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through = 9.5.7...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/15 4:47 p.m.1 views

WordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Or Benit in WordPress Plugin Really Simple SSL versions = 9.5.7...

5.3CVSS5.8AI score0.00041EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2026/03/13 9:31 p.m.0 views

EUVD-2026-12021

Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through = 9.5.7...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:55 p.m.1 views

CVE-2026-32461

Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through = 9.5.7...

5.3CVSS0.00041EPSS
Exploits0References1
CVE
CVE
added 2026/03/13 11:42 a.m.4 views

CVE-2026-32461

CVE-2026-32461 concerns the WordPress plugin Really Simple SSL (&lt;= 9.5.7). The connected records describe a Missing Authorization vulnerability in the plugin, enabling access control bypass due to “Incorrectly Configured Access Control Security Levels.” The affected component is the Really Sim...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/13 11:42 a.m.2 views

CVE-2026-32461 WordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through = 9.5.7...

5.8AI score0.00041EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/13 11:42 a.m.22 views

CVE-2026-32461 WordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through = 9.5.7...

4.3CVSS0.00041EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:42 a.m.0 views

CVE-2026-32461

Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through = 9.5.7...

5.8AI score0.00041EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.2 views

WordPress plugin Really Simple SSL 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.3 views

PT-2026-25305

CVE-2026-32461 Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Sim... https://t.co/0dxaonXInG...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2026/03/02 12:0 a.m.101 views

📄 WordPress Really Simple Security 9.1.1.1 Authentication Bypass

This Metasploit module exploits an authentication bypass vulnerability in the WordPress Really Simple SSL plugin versions 9.1.1.1 and below. The vulnerability exists in the skiponboarding REST API endpoint. When exploited, the module allows unauthenticated attackers to gain full administrator...

9.8CVSS5.9AI score0.93889EPSS
Exploits21
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-3825

Malicious code in bioql PyPI...

4.3CVSS8.9AI score0.00152EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29125

Malicious code in bioql PyPI...

5.5CVSS6.4AI score0.00149EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 11:39 a.m.3 views

CVE-2025-24623

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through = 9.1.4...

4.3CVSS7.2AI score0.00152EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:40 a.m.3 views

CVE-2024-31229

Server-Side Request Forgery SSRF vulnerability in Really Simple Plugins Really Simple SSL.This issue affects Really Simple SSL: from n/a through 7.2.3...

5.5CVSS5.1AI score0.00149EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/03/11 2:6 p.m.232 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

CVE-2024-10924 CVE-2024-10924 - Authentication Bypass in Reall...

9.8CVSS7.2AI score0.93889EPSS
Exploits21
GithubExploit
GithubExploit
added 2025/02/14 1:42 p.m.373 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

WordPress CVE-2024-10924 Exploit 📌 Overview This repository...

9.8CVSS7.5AI score0.93889EPSS
Exploits21
NVD
NVD
added 2025/01/24 6:15 p.m.7 views

CVE-2025-24623

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through = 9.1.4...

4.3CVSS0.00152EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.1 views

WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.1.4...

4.3CVSS7AI score0.00152EPSS
Exploits0Affected Software1
Rows per page
Query Builder