wordpress-CVE-2024-10924--exploit

🚀 Vulnerabilidade do Plugin Really Simple Security do WordPress CVE-2024-10924 📌 Visão Geral O WordPress é um dos sistemas de gerenciamento de conteúdo CMS de código aberto mais populares, alimentando milhões de sites em todo o mundo — desde blogs pessoais até plataformas de comércio eletrônico...

wordpress-really-simple-security-authn-bypass-exploit

wordpress-really-simple-security-authn-bypass-exploit Este é um programa Python3 que explora a vulnerabilidade de bypass de autenticação no Really Simple Security 9.1.2 CVE-2024-10924. AVISO Esta ferramenta é destinada a engenheiros de segurança e profissionais de AppSec para avaliações de...

CVE-2024-10924

Exploit para CVE-2024-10924 Plugin Really Simple Security do WordPress - Bypass de Autenticação 📌 Visão Geral CVE-2024-10924 é uma vulnerabilidade crítica de bypass de autenticação no plugin Really Simple Security para WordPress versões 9.0.0 a 9.1.1.1. Esta vulnerabilidade permite que atacantes...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Falha de bypass de autenticação do Really Simple Security do Wordpress em Docker Descrição Os plugins Really Simple Security Free, Pro e Pro Multisite para WordPress, versões 9.0.0 a 9.1.1.1, são afetados por uma vulnerabilidade de bypass de autenticação. Esse problema decorre do...

0-click-RCE-Exploit-for-CVE-2024-10924

CVE-2024-10924 / प्रमाणीकरण बायपास 2FA से RCE शोषण लेखक: Joshua Provoste https://x.com/JoshuaProvoste/status/1859061671852909055 यह रिपॉजिटरी CVE-2024-10924 के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट शोषण है, जो Really Simple Security WordPress प्लगइन में एक प्रमाणीकरण और 2FA बायपास कमजोरी है जिसका उपयोग रिमोट...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application यह Really Simple Security 9.1.2 प्रमाणीकरण बाईपास CVE-2024-10924 के एक्सप्लॉइट का परीक्षण करने के लिए एक कमजोर अनुप्रयोग है। चेतावनी! इस अनुप्रयोग में गंभीर सुरक्षा कमजोरियाँ हैं। इसे अपने जोखिम पर चलाएँ! एक बैकअप और संरक्षित...

CVE-2024-10924

CVE-2024-10924 - Really Simple Security में प्रमाणीकरण उपेक्षा अवलोकन यह परियोजना CVE-2024-10924 के शोषण और शमन को प्रदर्शित करती है, जो WordPress "Really Simple Security" प्लगइन में एक गंभीर प्रमाणीकरण उपेक्षा भेद्यता है। चरण 1: पर्यावरण सेटअप भेद्य WordPress वातावरण प्रारंभ करें: cd...

CVE-2024-10924-PoC

PoC Authentication Bypass MFA Really Simple Security WordPress Plugin | CVE-2024-10924 Acessamos a página web do WordPress onde veremos que tem MFA ativado através do plugin vulnerável: Devemos executar a PoC e fornecer os dados de acesso: De forma automática, o navegador será aberto através de u...

CVE-2024-10924-Wordpress-Docker

CVE-2024-10924 : Falha de bypass de autenticação no Wordpress Really Simple Security em Docker Descrição Os plugins Really Simple Security Free, Pro e Pro Multisite para WordPress, versões 9.0.0 a 9.1.1.1, são afetados por uma vulnerabilidade de bypass de autenticação. Este problema surge devido ...

CVE-2024-10924

CVE-2024-10924 Really Simple Security Free, Pro e Pro Multisite 9.0.0 – 9.1.1.1 – Bypass de Autenticação Descrição Os plugins Really Simple Security Free, Pro e Pro Multisite para WordPress são vulneráveis a bypass de autenticação nas versões 9.0.0 a 9.1.1.1. Isto deve-se ao tratamento inadequado...

CVE-2024-10924-Exploit

CVE-2024-10924-Exploit Really Simple Security फ्री, प्रो, और प्रो मल्टीसाइट 9.0.0 - 9.1.1.1 - प्रमाणीकरण बाईपास 📖 विवरण यह स्क्रिप्ट WordPress के लिए Really Simple Security प्लगइन संस्करण 9.0.0 - 9.1.1.1 में एक कमजोरी का शोषण करती है। यह दोष टू-फैक्टर प्रमाणीकरण API में checkloginandgetuser फ़ंक्...

CVE-2024-10924-PoC

PoC Authentication Bypass MFA Really Simple Security WordPress Plugin | CVE-2024-10924 نصل إلى صفحة ووردبريس حيث نرى أن المصادقة متعددة العوامل MFA مفعّلة عبر الإضافة الضعيفة: يجب علينا تنفيذ الـ PoC وتقديم بيانات الدخول: سيتم فتح المتصفح تلقائيًا عبر ملف مؤقت بامتداد .html داخل لوحة الإدارة. لنش...

CVE-2026-8293

The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowing an attacker who knows a user's password to obtain a WordPress authentication session for that user without completing the email...

CVE-2026-8293

CVE-2026-8293 affects the WordPress plugin Really Simple Security (before 9.5.10.1). The issue: two-factor authentication REST endpoints do not enforce the second-factor challenge, allowing an attacker who knows a user’s password to obtain a WordPress authentication session without completing the...

CVE-2026-8293 Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip

The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowing an attacker who knows a user's password to obtain a WordPress authentication session for that user without completing the email...

WordPress plugin Really Simple Security 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There wa...

CVE-2026-27397

Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V. Really Simple Security Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple Security Pro: from n/a through 9.5.4.0...

EUVD-2026-13055

Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V. Really Simple Security Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple Security Pro: from n/a through 9.5.4.0...

CVE-2026-27397 WordPress Really Simple Security Pro plugin <= 9.5.4.0 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V. Really Simple Security Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple Security Pro: from n/a through 9.5.4.0...

CVE-2026-27397

CVE-2026-27397 corresponds to an IDOR/authorization bypass in the WordPress plugin Really Simple Security Pro (Really Simple Plugins B.V.). The issue arises from incorrectly configured access control levels, allowing unauthorized access via a user-controlled key. Affected range includes Really Si...