Really-Simple-Plugins

3 CVEs across 3 Really-Simple-Plugins products. Browse Really-Simple-Plugins vulnerabilities, severities, and proof-of-concept exploits.

Really-Simple-Plugins products with known CVEs

ProductCVEs
Complianz7
Recipe Maker For Your Food Blog From Zip Recipes3
Really Simple Security1
Really-Simple-Plugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-10924Critical9.82024-11-15The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is d…
CVE-2024-1592Medium4.32024-03-02The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.5.6. This is…
CVE-2023-6498Medium4.42024-01-04The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and includi…
CVE-2023-52180High7.62023-12-31Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog fro…
CVE-2023-34030Medium6.52023-11-30Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Request Forgery.T…
CVE-2023-33333High7.12023-11-30Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Complianz, Really Simple Plugins Complianz Premium allows Cross-Site Scripting (XSS).T…
CVE-2023-31076High7.12023-08-17Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.6 versions.
CVE-2023-35089Medium4.32023-07-17Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin <= 8.0.7 versions.
CVE-2023-1069Medium5.42023-03-27The Complianz WordPress plugin before 6.4.2, Complianz Premium WordPress plugin before 6.4.2 do not validate and escape some of its shortcode attributes before…
CVE-2022-3494High8.82022-11-07The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL through an unsanit…
CVE-2022-0193Medium6.12022-02-14The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected…