Really Simple Security vulnerabilities
We track 2 vulnerabilities in Really Simple Security products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Really Simple Security vulnerabilities
- 7.5 High severity
Really Simple Security: Improper Authentication
The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and
- 7.5 High severity
Really Simple Security: Improper Authentication
The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST endpoints, allowing an attacker who knows a user's password to obtain a WordPress authentication session for t