Really Simple Plugins vulnerabilities
13 vulnerabilities
Known vulnerabilities in Really Simple Plugins products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.
Products
7- Really Simple SSL6 vulnerabilities
- Recipe Maker For Your Food Blog From Zip Recipes3 vulnerabilities
- Complianz2 vulnerabilities
- Complianz Premium2 vulnerabilities
- Burst Statistics Pro1 vulnerabilities
- Really Simple Security Pro1 vulnerabilities
- Really Simple Security Pro Multisite1 vulnerabilities
CVE-2025-24623really simple pluginsreally simple ssl+1
EPSS score0.20%
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through <= 9.1.4.CVE-2024-31229really simple pluginsreally simple ssl+1EPSS score0.33%
Server-Side Request Forgery (SSRF) vulnerability in Really Simple Plugins Really Simple SSL.This issue affects Really Simple SSL: from n/a through 7.2.3.CVE-2024-10924really simple pluginsreally simple security pro+6EPSS score82.22%
The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default).CVE-2026-84777really simple pluginsreally simple ssl+1EPSS score0.39%
Unauthenticated Broken Authentication in Really Simple SSL <= 9.8.0 versions.CVE-2026-84775really simple pluginsreally simple ssl+1EPSS score0.40%
Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.CVE-2026-48970really simple pluginsreally simple ssl+1EPSS score0.46%
Unauthenticated Broken Authentication in Really Simple SSL <= 9.5.10 versions.CVE-2026-32461really simple pluginsreally simple ssl+1EPSS score0.27%
Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple SSL: from n/a through <= 9.5.7.CVE-2023-52180really simple pluginsrecipe maker for your food blog from zip recipes+2EPSS score0.48%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0.CVE-2023-31076really simple pluginsrecipe maker for your food blog from zip recipes+2EPSS score0.38%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.6 versions.CVE-2023-5761burst-statisticsburst_statistics+4EPSS score0.69%
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter in versions 1.4.0 to 1.4.6.1 (free) and versions 1.4.0 to 1.5.0 (pro) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2023-34030really simple pluginscomplianz+4EPSS score0.34%
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Request Forgery.This issue affects Complianz: from n/a through 6.4.5; Complianz Premium: from n/a through 6.4.7.CVE-2023-35089really simple pluginsrecipe maker for your food blog from zip recipes+2EPSS score0.26%
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.7 versions.CVE-2023-33333really simple pluginscomplianz+4EPSS score0.31%
Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Scripting (XSS).This issue affects Complianz: from n/a through 6.4.4; Complianz Premium: from n/a through 6.4.6.1.