Really Simple Security < 9.1.2 - Authentication Bypass

The Really Simple Security Free, Pro, and Pro Multisite plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'checkloginandgetuser' function. This makes it possible...

wordpress-cve-2024-10924-exploit

WordPress CVE-2024-10924 Exploit 📌 Resumen Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-10924, una vulnerabilidad en el plugin de WordPress Really Simple SSL que permite omitir la autenticación de dos factores 2FA. Los atacantes pueden explotar esta falla para...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Penetration Testing Report 2FA Bypass Vulnerability in Really Simple SSL Plugin 📋 Table of Contents Executive Summary Target Information Methodology Timeline Reconnaissance Phase Vulnerability Analysis Attack Flow Exploitation Impact Assessment Remediation Tools Used...

CVE-2024-10924

CVE-2024-10924 Exploit - WordPress Really Simple SSL Plugin 2FA Bypass Overview This repository contains an exploit for CVE-2024-10924 , a vulnerability in the Really Simple SSL plugin for WordPress. It allows an attacker to bypass Two-Factor Authentication 2FA onboarding and gain unauthorized...

WordPress Really Simple Security plugin 8.1.6-9.8.2 - Unauthenticated Unbounded Option Growth vulnerability

Unauthenticated Unbounded Option Growth vulnerability discovered by Naoki Kawahigashi in WordPress Plugin Really Simple SSL versions 8.1.6-9.8.2...

CVE-2026-84777

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

EUVD-2026-70573

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84777

WordPress Really Simple SSL plugin versions ≤ 9.8.0 are affected by an unauthenticated broken authentication vulnerability described as a 2FA bypass . The flaw allows a network-based attacker (with no prior privileges or user interaction, but high attack complexity) to compromise authentication, ...

CVE-2026-84777 WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84777: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

PT-2026-85113

Unauthenticated Broken Authentication in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

EUVD-2026-69941

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775

CVE-2026-84775 affects the Really Simple SSL WordPress plugin, versions 9.8.0 and earlier . The vulnerability allows an unauthenticated Denial of Service attack, meaning a remote attacker with no prior access can disrupt service availability. The CVSS 3.1 base score is 5.3 (MEDIUM) , with the pri...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

CVE-2026-84775 WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack in Really Simple SSL = 9.8.0 versions...

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

2FA Bypass vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Really Simple SSL versions = 9.8.0...

PT-2026-84703

Name of the Vulnerable Software and Affected Versions Really Simple SSL versions prior to 9.8.1 Description An unauthenticated Denial of Service DoS issue exists, which allows an attacker to disrupt the availability of the service without requiring valid credentials. Recommendations Update to a...