WordPress Plugin Vulnerabilities

Really Simple Security < 9.8.1 - Unauthenticated DoS

Description

The plugin is vulnerable to Denial of Service due to insufficient validation of user supplied input. This makes it possible for unauthenticated attackers to make the affected site unavailable.

Affects Plugins

Plugin icon
really-simple-ssl
Fixed in 9.8.1

References

CVE
CVE-2026-84775
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/eeea5b13-54e8-4482-bdbc-6922cf96b4e1

Miscellaneous

Original Researcher
Ananda Dhakal
Verified
No
WPVDB ID
f10bbaa1-c132-417c-b615-cfe23ca8e8e9

Timeline

Publicly Published
2026-09-02 (about 1 month ago)
Added
2026-09-09 (about 1 month ago)
Last Updated
2026-09-09 (about 1 month ago)

Other

Published
Title
Published
2014-11-20
Title
WordPress <= 4.0 - Long Password Denial of Service (DoS)
Published
2025-03-28
Title
WP-Syntax <= 1.2 - Author+ Potential ReDoS
Published
2025-03-27
Title
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
Published
2025-09-25
Title
Download After Email 2.1.5 - 2.1.6 - Unauthorized Repeated Form Submissions
Published
2023-12-05
Title
Code Embed < 2.3.7 - Authenticated(Contributor+) Denial of Service