Threats tagged 'ghsa-36qh-hpmx-m9cv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.3%	CVE-2026-89080Really Simple Security (WordPress plugin) · Improper Authentication High7.5EPSS 0.3%2026-09-13CVE Database V5CVE-2026-89080 The Really Simple Security WordPress plugin before 9.8.1 does not prevent an unauthenticated request from resetting an account's completed email two-factor enrolment, allowing an attacker who already knows the account's password to bypass the second factor and obtain that user's session, up to administrator. EPSS 0.3%Vulnerability CWE-287 #ghsa-36qh-hpmx-m9cv	CVE Database V5	2026-09-13

Page 1 of 1