CVE-2026-84777highCWE-288

CVE-2026-84777: falha de alta gravidade em Really Simple SSL

WordPress Really Simple SSL plugin <= 9.8.0 - 2FA Bypass vulnerability

Publicada em

Seguir esta CVE+ Monitorar Really Simple SSL

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 0.4%
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Really Simple Plugins · Really Simple SSL
CVEs relacionadas — Really Simple SSL

No mesmo produto, das mais perigosas para as menos.

CVE-2026-84775MEDIUMWordPress Really Simple SSL plugin <= 9.8.0 - Denial of Service Attack vulnerabilityEPSS 0.4%CVE-2026-48970HIGHWordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2024-31229MEDIUMWordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2025-24623MEDIUMWordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-32461MEDIUMWordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerabilityEPSS 0.2%