really-simple-plugins records
12 published records for vendor really-simple-plugins.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 8.3%
- Pre-auth RCE
- 0
- With a fix record
- 58.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
64This week | CVE-2024-10924Weaponized | Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypassreally-simple-plugins · really simple security · CWE-288 | Critical9.8 | — | 82.2% | Nov 15, 2024 |
35Monitor | CVE-2022-3494No exploit | Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLireally-simple-plugins · complianz · CWE-89 | High8.8 | — | 1.3% | Nov 7, 2022 |
35Monitor | CVE-2023-34030No exploit | WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)really-simple-plugins · complianz · CWE-352 | High8.8 | — | 0.3% | Nov 30, 2023 |
35Monitor | CVE-2023-33333No exploit | WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)really-simple-plugins · complianz · CWE-352 | High8.8 | — | 0.3% | Nov 30, 2023 |
35Monitor | CVE-2023-35089No exploit | WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)really-simple-plugins · recipe maker for your food blog from zip recipes · CWE-352 | High8.8 | — | 0.3% | Jul 17, 2023 |
32Monitor | CVE-2023-52180No exploit | WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injectionreally-simple-plugins · recipe maker for your food blog from zip recipes · CWE-89 | High8.1 | — | 0.5% | Dec 31, 2023 |
24Monitor | CVE-2022-0193No exploit | Complianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site Scriptingreally-simple-plugins · complianz · CWE-79 | Medium6.1 | — | 0.9% | Feb 14, 2022 |
24Monitor | CVE-2023-31076No exploit | WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)really-simple-plugins · recipe maker for your food blog from zip recipes · CWE-79 | Medium6.1 | — | 0.4% | Aug 17, 2023 |
22Monitor | CVE-2024-31229No exploit | WordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerabilityreally simple plugins · really simple ssl · CWE-918 | Medium5.5 | — | 0.3% | Apr 18, 2024 |
21Monitor | CVE-2023-1069No exploit | Complianz - GDPR/CCPA Cookie Consent < 6.4.2 - Contributor+ Stored XSSreally-simple-plugins · complianz · CWE-79 | Medium5.4 | — | 0.6% | Mar 27, 2023 |
19Monitor | CVE-2023-6498No exploit | Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settingsreally-simple-plugins · complianz · CWE-79 | Medium4.8 | — | 0.3% | Jan 4, 2024 |
17Monitor | CVE-2024-1592No exploit | Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletionreally-simple-plugins · complianz · CWE-352 | Medium4.3 | — | 0.2% | Mar 2, 2024 |
- CVE-2024-1092464This week
Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass
CriticalCVSS 9.8WeaponizedEPSS 82%really-simple-plugins · really simple securityNov 15, 2024
- CVE-2022-349435Monitor
Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi
HighCVSS 8.8No exploitEPSS 1%really-simple-plugins · complianzNov 7, 2022
- CVE-2023-3403035Monitor
WordPress Complianz and Complianz Premium plugins - Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%really-simple-plugins · complianzNov 30, 2023
- CVE-2023-3333335Monitor
WordPress Complianz and Complianz Premium plugins - Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS)
HighCVSS 8.8No exploitEPSS 0%really-simple-plugins · complianzNov 30, 2023
- CVE-2023-3508935Monitor
WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%really-simple-plugins · recipe maker for your food blog from zip recipesJul 17, 2023
- CVE-2023-5218032Monitor
WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.1.0 is vulnerable to SQL Injection
HighCVSS 8.1No exploitEPSS 0%really-simple-plugins · recipe maker for your food blog from zip recipesDec 31, 2023
- CVE-2022-019324Monitor
Complianz - GDPR/CCPA Cookie Consent < 6.0.0 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%really-simple-plugins · complianzFeb 14, 2022
- CVE-2023-3107624Monitor
WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%really-simple-plugins · recipe maker for your food blog from zip recipesAug 17, 2023
- CVE-2024-3122922Monitor
WordPress Really Simple SSL plugin <= 7.2.3 - Server Side Request Forgery (SSRF) vulnerability
MediumCVSS 5.5No exploitEPSS 0%really simple plugins · really simple sslApr 18, 2024
- CVE-2023-106921Monitor
Complianz - GDPR/CCPA Cookie Consent < 6.4.2 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 1%really-simple-plugins · complianzMar 27, 2023
- CVE-2023-649819Monitor
Complianz | GDPR/CCPA Cookie Consent <= 6.5.5 - Authenticated(Administrator+) Stored Cross-site Scripting via settings
MediumCVSS 4.8No exploitEPSS 0%really-simple-plugins · complianzJan 4, 2024
- CVE-2024-159217Monitor
Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion
MediumCVSS 4.3No exploitEPSS 0%really-simple-plugins · complianzMar 2, 2024