Really Simple Plugins B.V. vulnerabilities
Published CVEs affecting Really Simple Plugins B.V. products: 4 record(s), with severity, exploitation and fixes.
CVE-2026-48970
High · 8.1
CWE-288 Jun 15, 2026
WordPress Really Simple SSL plugin <= 9.5.10 - Broken Authentication vulnerability
Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.
CVE-2026-48969
Medium · 6.5
CWE-862 Jun 15, 2026
WordPress Really Simple SSL plugin <= 9.5.9 - Broken Access Control vulnerability
Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.
CVE-2026-27397
Medium · 6.5
CWE-639 Mar 19, 2026
WordPress Really Simple Security Pro plugin <= 9.5.4.0 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V. Really Simple Security Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple Security Pro: from n/a through 9.5.4.0.
CVE-2026-32461
Medium · 4.3
CWE-862 Mar 13, 2026
WordPress Really Simple SSL plugin <= 9.5.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through <= 9.5.7.