WordPress plugin
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium10
- Low0
All Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated Denial of Service ≤9.8.0Update to 9.8.1 | CVE-2026-84775 | |
| High8.8 | Authenticated (Custom Role+) Remote Code Execution <9.8.0Update to 9.8.0 | CVE-2026-81766 | |
| Critical9.8 | 9.1.1.1 - Authentication Bypass 9.0.0 – 9.1.1.1Update to 9.1.2 | CVE-2024-10924 |
- High7.5Unauthenticated Denial of Service
≤9.8.0Update to 9.8.1
- High8.8Authenticated (Custom Role+) Remote Code Execution
<9.8.0Update to 9.8.0
- Critical9.89.1.1.1 - Authentication Bypass
9.0.0 – 9.1.1.1Update to 9.1.2
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL): common questions
Does Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in Really Simple Security – Simple and Performant Security (formerly Really Simple SSL): 1 critical, 2 high, 10 medium. None are known to affect version null.
How do I check which version of Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vulnerability?
CVE-2026-88798, published Sep 16, 2026: Really Simple Security (Free) <= 9.8.2 - Unauthenticated Unbounded Option Growth. Severity: Medium (CVSS 5.3).
Is any Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vulnerability listed in CISA KEV?
No. None of the known Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vulnerabilities is currently listed in the CISA KEV catalog.