CVE-2026-32461

A security flaw exists in Really Simple Security – Simple and Performant Security plugin for WordPress, which allows users with a minimum of Subscriber permissions to execute an unapproved operation due to the absence of capability verification on a specific function across all versions prior to 9.5.7. This vulnerability can be exploited by authenticated attackers.

Based on public CVE data (MITRE/NVD).