54 matches found
Really Simple Security < 9.1.2 - Authentication Bypass
The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...
wordpress-cve-2024-10924-exploit
Эксплойт для WordPress CVE-2024-10924 📌 Обзор Этот репозиторий содержит эксплойт Proof-of-Concept PoC для CVE-2024-10924, уязвимости в плагине WordPress Really Simple SSL, которая позволяет обойти двухфакторную аутентификацию 2FA. Злоумышленники могут использовать эту уязвимость для входа в систе...
wordpress-cve-2024-10924-pentest
Отчёт о тестировании на проникновение WordPress CVE-2024-10924 Уязвимость обхода 2FA в плагине Really Simple SSL 📋 Оглавление Краткое резюме Информация о цели Методология Хронология Этап разведки Анализ уязвимости Схема атаки Эксплуатация Оценка воздействия Устранение Использованные инструменты...
CVE-2024-10924
CVE-2024-10924 Эксплойт - Обход 2FA плагина Really Simple SSL для WordPress Обзор Этот репозиторий содержит эксплойт для CVE-2024-10924 , уязвимости в плагине Really Simple SSL для WordPress. Он позволяет злоумышленнику обойти двухфакторную аутентификацию 2FA и получить несанкционированный доступ...
CVE-2026-84777
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
EUVD-2026-70573
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...
CVE-2026-84777
WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...
EUVD-2026-69941
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
CVE-2026-84775
CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...
CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...
WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...
PT-2026-84703
Name of the Vulnerable Software and Affected Versions Really Simple SSL versions prior to 9.8.1 Description An unauthenticated Denial of Service DoS issue exists, which allows an attacker to disrupt the availability of the service without requiring valid credentials. Recommendations Update to a...
WordPress Really Simple Security plugin < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability
Multisite Subsite Admin+ Arbitrary Plugin Installation vulnerability discovered by Charles Vosburgh in WordPress Plugin Really Simple SSL versions 9.8.0...
CVE-2026-48970
Unauthenticated Broken Authentication in Really Simple SSL = 9.5.10 versions...
CVE-2026-48970 WordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Really Simple SSL = 9.5.10 versions...
CVE-2026-48970
The CVE affects WordPress the Really Simple SSL plugin (versions
EUVD-2026-36866
Unauthenticated Broken Authentication in Really Simple SSL = 9.5.10 versions...
