68 matches found
wordpress-cve-2024-10924-exploit
WordPress CVE-2024-10924 Exploit 📌 Overview This repository contains a Proof-of-Concept PoC exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication 2FA. Attackers can exploit this flaw to log in as any user with a valid...
wordpress-cve-2024-10924-pentest
WordPress CVE-2024-10924 Penetration Testing Report 2FA Bypass Vulnerability in Really Simple SSL Plugin 📋 Table of Contents Executive Summary Target Information Methodology Timeline Reconnaissance Phase Vulnerability Analysis Attack Flow Exploitation Impact Assessment Remediation Tools Used...
Really Simple Security < 9.1.2 - Authentication Bypass
The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...
CVE-2024-10924
CVE-2024-10924 익스플로잇 - WordPress Really Simple SSL 플러그인 2FA 우회 개요 이 저장소는 WordPress용 Really Simple SSL 플러그인의 취약점인 CVE-2024-10924 에 대한 익스플로잇을 포함합니다. 이 공격자는 이중 인증2FA 온보딩을 우회하고 WordPress 사이트에 대한 무단 관리자 액세스를 얻을 수 있습니다. 취약점 세부 정보 CVE : CVE-2024-10924 영향을 받는 구성 요소 :...
WordPress Really Simple Security plugin 8.1.6-9.8.2 - Unauthenticated Unbounded Option Growth vulnerability
Unauthenticated Unbounded Option Growth vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Really Simple SSL versions 8.1.6-9.8.2...
CVE-2026-84777
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777
WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...
EUVD-2026-70573
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
PT-2026-85113
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84775
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
CVE-2026-84775
CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...
CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
EUVD-2026-69941
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...
WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...