CVE · Medium

CVE-2026-48969 — Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) [really-simple-ssl] < 9.5.10

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-48969 Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) [really-simple-ssl] < 9.5.10 Missing Authorization Medium 6.5 < 9.5.10 9.5.10 2026-06-03

CVE-2026-48969

A security flaw exists within the Really Simple Security plugin for WordPress, which allows users with elevated permissions to bypass certain restrictions. The issue arises from a lack of authorization checks on a specific function in versions prior to 9.5.10, potentially enabling malicious actors to execute unauthorized actions.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.