Lucene search
+L

68 matches found

Kitploit
Kitploit
•added 2026/10/09 10:48 a.m.•22 views

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Rapport de Test de Pénétration Vulnérabilité de Contournement 2FA dans le Plugin Really Simple SSL 📋 Table des matières Résumé exécutif Informations sur la cible Méthodologie Chronologie Phase de reconnaissance Analyse de la vulnérabilité Déroulement de l'attaque...

9.8CVSS7.6AI score0.82218EPSS
SaveExploits21
Kitploit
Kitploit
•added 2026/10/09 1:50 a.m.•13 views

wordpress-cve-2024-10924-exploit

Exploit WordPress CVE-2024-10924 📌 Aperçu Ce dépôt contient un exploit de type Proof-of-Concept PoC pour CVE-2024-10924, une vulnérabilité dans le plugin WordPress Really Simple SSL qui permet de contourner l'authentification à deux facteurs 2FA. Les attaquants peuvent exploiter cette faille pour...

9.8CVSS7.4AI score0.82218EPSS
SaveExploits21References1
Nuclei
Nuclei
•added 2026/10/07 2:15 a.m.•97 views

Really Simple Security < 9.1.2 - Authentication Bypass

The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...

9.8CVSS7.2AI score0.82218EPSS
SaveExploits21References7
Kitploit
Kitploit
•added 2026/10/04 12:12 a.m.•11 views

CVE-2024-10924

Exploit CVE-2024-10924 - Contournement 2FA du plugin Really Simple SSL pour WordPress Vue d'ensemble Ce dépôt contient un exploit pour CVE-2024-10924 , une vulnérabilité dans le plugin Really Simple SSL pour WordPress. Il permet à un attaquant de contourner l'inscription à l'authentification à de...

9.8CVSS7.7AI score0.82218EPSS
SaveExploits21
Patchstack
Patchstack
•added 2026/09/18 1:18 p.m.•10 views

WordPress Really Simple Security plugin 8.1.6-9.8.2 - Unauthenticated Unbounded Option Growth vulnerability

Unauthenticated Unbounded Option Growth vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Really Simple SSL versions 8.1.6-9.8.2...

5.3CVSS5.8AI score0.0042EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/03 5:17 p.m.•13 views

CVE-2026-84777

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

7.4CVSS0.00387EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/03 4:31 p.m.•31 views

CVE-2026-84777

WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...

7.4CVSS5.8AI score0.00387EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/03 4:31 p.m.•55 views

CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

7.4CVSS0.00387EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/03 4:31 p.m.•14 views

EUVD-2026-70573

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

7.4CVSS5.9AI score0.00387EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/03 4:31 p.m.•20 views

CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

7.4CVSS5.8AI score0.00387EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•5 views

CVE-2026-84777: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

7.4CVSS5.7AI score0.00387EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•26 views

PT-2026-85113

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

7.4CVSS5.1AI score0.00387EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/02 12:17 p.m.•12 views

CVE-2026-84775

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

5.3CVSS0.00402EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 11:37 a.m.•40 views

CVE-2026-84775

CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...

5.3CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 11:37 a.m.•42 views

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

5.3CVSS0.00402EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 11:37 a.m.•15 views

EUVD-2026-69941

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

5.3CVSS5.9AI score0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 11:37 a.m.•18 views

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

5.3CVSS5.8AI score0.00402EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/09/02 10:47 a.m.•12 views

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

7.4CVSS5.2AI score0.00387EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/09/02 10:20 a.m.•13 views

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

5.3CVSS5.9AI score0.00402EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•4 views

CVE-2026-84775: Allocation of Resources Without Limits or Throttling

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

5.3CVSS5.7AI score0.00402EPSS
SaveExploits0References2
Rows per page
Query Builder