WordPress plugin
Really Simple Security Pro security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium1
- Low0
All Really Simple Security Pro vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | 9.1.1.1 - Authentication Bypass 9.0.0 – 9.1.1.1Update to 9.1.2 | CVE-2024-10924 |
- Critical9.89.1.1.1 - Authentication Bypass
9.0.0 – 9.1.1.1Update to 9.1.2
Really Simple Security Pro: common questions
Does Really Simple Security Pro have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Really Simple Security Pro: 1 critical, 1 medium. None are known to affect version null.
How do I check which version of Really Simple Security Pro I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Really Simple Security Pro vulnerability?
CVE-2026-27397, published Feb 23, 2026: Really Simple Security Pro <= 9.5.4.0 - Authenticated (Subscriber+) Insecure Direct Object Reference. Severity: Medium (CVSS 4.3).
Is any Really Simple Security Pro vulnerability listed in CISA KEV?
No. None of the known Really Simple Security Pro vulnerabilities is currently listed in the CISA KEV catalog.