Really Simple Security (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-18. Vendor: Unknown.

CVEs of Really Simple Security

• CVE-2026-88798 - CVSS 5.3 (medium), 2026-09-18: The Really Simple Security WordPress plugin before 9.8.3 does not validate a client-supplied address value before using it as a storage key in one of its own…
• CVE-2026-89080 - CVSS 7.5 (high), 2026-09-13: The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor…
• CVE-2026-81766 - CVSS 6.6 (medium), 2026-08-30: The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really Simple Security WordPress plugin before…
• CVE-2026-8293 - CVSS 7.5 (high), 2026-06-02: The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of its two-factor authentication REST…