Really Simple Plugins Really Simple Security Pro multisite vulnerabilities

Latest Really Simple Plugins Really Simple Security Pro multisite CVEs

Newest publication first

1. CVE-2024-10924 Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

   Published 2024-11-15

   Critical·CVSS 9.8 EPSS 82.2% Framework module

   The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.