| CVE-2026-88798 |
The Really Simple Security WordPress plugin before 9.8.3 does not validate a client-supplied address value before using…
|
5.3
Medium
|
Sep 18, 2026 |
| CVE-2026-89080 |
The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting…
|
7.5
High
|
Sep 13, 2026 |
| CVE-2026-81766 |
The Really Simple Security WordPress plugin before 9.8.0 does not check that the user is allowed to install Really…
|
6.6
Medium
|
Aug 30, 2026 |
| CVE-2026-8293 |
The Really Simple Security WordPress plugin before 9.5.10.1 does not enforce the second-factor challenge in two of…
|
7.5
High
|
Jun 2, 2026 |