Really Simple Plugins vulnerabilities
We track 6 vulnerabilities in Really Simple Plugins products across 7 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 15, 2024.
Latest Really Simple Plugins vulnerabilities
- 9.8 Critical severity
Really Simple Security Pro multisite: Missing Authentication for Critical Functionality
The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and
- 8.1 High severity
Recipe Maker For Your Food Blog from Zip Recipes: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8
- 7.5 High severity
Burst Statistics – Privacy-Friendly Analytics…: Improper Neutralization of Special Elements used in an SQL Command
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 (free) and versions 1.4.0 to 1.5.0 (pro) due to insufficient escaping on the user supplied
- 8.8 High severity
Complianz: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Request Forgery.This issue affects Complianz: from n/a through 6.4.5; Complianz Premium: from n/a through 6.4.7.
- 8.8 High severity
Complianz: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Scripting (XSS).This issue affects Complianz: from n/a through 6.4.4; Complianz Premium: from n/a through 6.4.6.1.
- 8.8 High severity
Complianz – GDPR/CCPA Cookie Consent: Improper Neutralization of Special Elements used in an SQL Command
The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanitized translation. SQL can be injected through an infected translation file, or by a user with a trans