PT-2026-95249 · WordPress · Really Simple Security
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Really Simple Security WordPress plugin versions prior to 9.8.3
Description
An issue exists where the software fails to validate a client-supplied address value before utilizing it as a storage key within its own options. This allows unauthenticated attackers to cause unbounded growth of that option, which can result in degraded performance when the site handles missing pages.
Recommendations
Update the plugin to version 9.8.3 or later.
Exploit
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Really Simple Security