CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V. Really Simple Security Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Really Simple Security Pro: from n/a through 9.5.4.0.
Explanation of Vulnerability in Simple Terms
Really Simple Security Pro versions up to 9.5.4.0 contain a flaw that allows an attacker to modify data or disrupt service availability without authentication. The vulnerability requires only network access and no user interaction. Site administrators should update to a version newer than 9.5.4.0 to remediate the issue.
What an attacker can do
Modify site data or cause temporary unavailability without needing to log in.
Potential impact on your site
Attackers can alter content or temporarily disrupt your site without credentials.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
