What’s Vulnerable › Products
Really Simple Security vulnerabilities
4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your Really Simple Security version is affected
Latest Really Simple Security vulnerabilities
- CVE-2026-88798 — Really Simple Security (Free) < 9.8.3 - Unauthenticated Unbounded Option Growth via Spoofed Client IP Header (CVSS 5.3)
- CVE-2026-89080 — Really Simple Security < 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion (CVSS 7.5)
- CVE-2026-81766 — Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin (CVSS 6.6)
- CVE-2026-8293 — Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip (CVSS 7.5)