Vulnerabilities in Really Simple Plugins
11 resultsVexday analysis
Really Simple Plugins apresenta 11 vulnerabilidades catalogadas, sendo 2 críticas, com nenhuma sob exploração ativa conhecida. A fraqueza dominante é a falta de proteção contra falsificação de requisições entre sites (CWE-352), um vetor de ataque clássico em plugins WordPress. Apenas 1 vulnerabilidade foi divulgada nos últimos 90 dias, indicando risco moderado e estável.
CVE-2024-10924CRITICALReally Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication BypassEPSS 82.0%CVE-2023-5761CRITICALThe Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter EPSS 0.7%CVE-2023-52180HIGHWordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL InjectionEPSS 0.5%CVE-2026-48970HIGHWordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2023-31076HIGHWordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-34030MEDIUMWordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2024-31229MEDIUMWordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2023-33333HIGHWordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)EPSS 0.3%CVE-2023-35089MEDIUMWordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-24623MEDIUMWordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-32461MEDIUMWordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerabilityEPSS 0.2%