PSA: Really Simple Security Free and Pro Versions Affected by Critical Authentication Bypass Vulnerability

The vulnerability makes it possible for an attacker to remotely gain access to any account on the site, including the administrator account, when the two-factor authentication feature is enabled

Plugin: https://really-simple-ssl.com/
Source: https://www.wordfence.com/blog/2024/11/really-simple-security-vulnerability

Anyone who using that should update to version 9.1.2 asap.


welp, maybe one of my sites is dead too

Thanks for sharing this @xReminisce. I think this is a good thing to alert the community about, so I'll make sure your thread goes out in the BHW newsletter next week.