Advisories · Technology

Really Simple Plugins Really Simple SSL.

Every CVE that names Really Simple Plugins Really Simple SSL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84777 CVE record

CVSS 7.4 High

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability
- Really Simple Plugins Really Simple SSL
- Authentication bypass
Not analysed yet 3 Sept 2026
CVE-2026-84775 CVE record

CVSS 5.3 Medium

WordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerability
- Really Simple Plugins Really Simple SSL
- Denial of service
Not analysed yet 2 Sept 2026
CVE-2026-48970 CVE record

CVSS 8.1 High

WordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerability
- Really Simple Plugins Really Simple SSL
- Authentication bypass
Not analysed yet 15 Jun 2026
CVE-2026-32461 CVE record

CVSS 4.3 Medium

WordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerability
- Really Simple Plugins Really Simple SSL
- Broken access control
Not analysed yet 13 Mar 2026
CVE-2025-24623 CVE record

CVSS 4.3 Medium

WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerability
- Really Simple Plugins Really Simple SSL
- Cross-site request forgery (CSRF)
Not analysed yet 24 Jan 2025
CVE-2024-31229 CVE record

CVSS 5.5 Medium

WordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerability
- Really Simple Plugins Really Simple SSL
- Server-side request forgery (SSRF)
Not analysed yet 18 Apr 2024