Lucene search
+L

212 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:40 a.m.•17 views

CVE-2024-31229

Server-Side Request Forgery SSRF vulnerability in Really Simple Plugins Really Simple SSL.This issue affects Really Simple SSL: from n/a through 7.2.3...

5.5CVSS5.1AI score0.0033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:49 a.m.•18 views

CVE-2011-2181

Multiple SQL injection vulnerabilities in A Really Simple Chat ARSC 3.3-rc2 allow remote attackers to execute arbitrary SQL commands via the 1 arscuser parameter to base/admin/edituser.php, 2 arsclayoutid parameter in base/admin/editlayout.php, or 3 arscroom parameter to base/admin/editroom.php...

7.5CVSS8.9AI score0.01147EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:58 a.m.•15 views

CVE-2011-2180

Cross-site scripting XSS vulnerability in dereferer.php in A Really Simple Chat ARSC 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arsclink parameter...

4.3CVSS5.9AI score0.01082EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:21 a.m.•16 views

CVE-2011-2470

Cross-site scripting XSS vulnerability in chat/base/admin/login.php in A Really Simple Chat ARSC 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arscmessage parameter...

4.3CVSS5.9AI score0.01082EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/09 3:26 p.m.•11 views

CVE-2025-47593

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonas Hjalmarsson Really Simple Under Construction Page really-simple-under-construction allows Stored XSS.This issue affects Really Simple Under Construction Page: from n/a through = 1.4.6...

5.9CVSS7.2AI score0.00275EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•2 views

CVE-2025-47593: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonas Hjalmarsson Really Simple Under Construction Page really-simple-under-construction allows Stored XSS.This issue affects Really Simple Under Construction Page: from n/a through = 1.4.6...

5.9CVSS5.8AI score0.00275EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2025/04/15 12:00 a.m.•248 views

Really Simple Security 9.1.1.1 - Authentication Bypass

!/usr/bin/env python3 Exploit Title: Really Simple Security 9.1.1.1 - Authentication Bypass Date: 2024-11-19 Exploit Author: Antonio Francesco Sardella Vendor Homepage: https://really-simple-ssl.com/ Software Link: https://really-simple-ssl.com/ Version: Really Simple Security Free, Pro, and Pro...

9.8CVSS7.2AI score0.82218EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/03/11 2:06 p.m.•284 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

CVE-2024-10924 CVE-2024-10924 - Authentication Bypass in Reall...

9.8CVSS7.2AI score0.82218EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/02/23 8:47 a.m.•495 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

🚀 WordPress Really Simple Security Plugin Vulnerability CVE-2...

9.8CVSS8.1AI score0.82218EPSS
SaveExploits21
GithubExploit
GithubExploit
•added 2025/02/14 1:42 p.m.•409 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

WordPress CVE-2024-10924 Exploit 📌 Overview This repository...

9.8CVSS7.5AI score0.82218EPSS
SaveExploits21
RedhatCVE
RedhatCVE
•added 2025/02/05 4:54 a.m.•17 views

CVE-2024-10924

The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...

9.8CVSS7.2AI score0.82218EPSS
SaveExploits21References1
GithubExploit
GithubExploit
•added 2025/02/02 9:53 p.m.•422 views

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

CVE-2024-10924-Exploit Really Simple Security Free, Pro, and...

9.8CVSS6.9AI score0.82218EPSS
SaveExploits21
NVD
NVD
•added 2025/01/24 6:15 p.m.•18 views

CVE-2025-24623

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through = 9.1.4...

4.3CVSS0.00201EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:24 p.m.•151 views

CVE-2025-24623

CVE-2025-24623 is a CSRF vulnerability in the WordPress plugin Really Simple Security (formerly Really Simple SSL) affecting versions n/a through 9.1.4. The CVSSv3.1 base score is 4.3 (Medium) with network attack vector, required user interaction, and no confidentiality/availability impact, and p...

4.3CVSS7.2AI score0.00201EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/24 5:24 p.m.•14 views

CVE-2025-24623 WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through = 9.1.4...

4.3CVSS7.2AI score0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:24 p.m.•72 views

CVE-2025-24623 WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through = 9.1.4...

4.3CVSS0.00201EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•13 views

WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.1.4...

4.3CVSS7AI score0.00201EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•25 views

PT-2025-5452 · Unknown · Really Simple Ssl

Name of the Vulnerable Software and Affected Versions: Really Simple SSL versions n/a through 9.1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions n/a through...

4.3CVSS7.3AI score0.00201EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•4 views

CVE-2025-24623: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through = 9.1.4...

4.3CVSS5.8AI score0.00201EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•13 views

WordPress plugin Really Simple SSL 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

4.3CVSS8.2AI score0.00201EPSS
SaveExploits0References2
Rows per page
Query Builder