Really Simple Security Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:really_simple_plugins:really_simple_security_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Really Simple Plugins (e3e2f93f-7bcf-552f-89db-5f8fed75d00e) |
|---|---|
| Product | Really Simple Security Pro (bb2480ea-402b-5f6a-b55c-5cac7d9e6d24) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-10924 |
vulnerable | 2026-06-08 06:23:48.138306 |
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
CRITICAL (9.8)
The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default).
Published: 2024-11-15T03:18:45.746Z
Updated: 2026-01-23T15:19:28.477Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.