Advisories · Technology
Really Simple Security.
Every CVE that names Really Simple Security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header
- Really Simple Security
- Denial of service
- CVSS 7.5 High
Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion
- Really Simple Security
- Authentication bypass
- CVSS 6.6 Medium
Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin
- Really Simple Security
- Privilege escalation
- CVSS 7.5 High
Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip
- Really Simple Security
- Authentication bypass