CVE-2026-8293

The Really Simple Security WordPress plugin, in versions prior to 9.5.10.1 , contains an authentication bypass vulnerability. The root cause is the failure to enforce second-factor challenges in two of its two-factor authentication REST endpoints. This allows an attacker who possesses a user's pa...