Medium · 4.3 CVE-2025-24623 EUVD-2025-3825GHSA-r7xj-pwvr-9j47

WordPress Really Simple Security plugin <= 9.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 24, 2025 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: Really Simple Plugins Product: Really Simple SSL

Description

Cross-Site Request Forgery (CSRF) vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Cross Site Request Forgery.This issue affects Really Simple SSL: from n/a through <= 9.1.4.

Affected products

Vendor	Product	Affected	Fixed
Really Simple Plugins	Really Simple SSL	≤ 9.1.4	—

References

https://patchstack.com/database/Wordpress/Plugin/really-simple-ssl/vulnerability/wordpress-really-simple-security-plugin-9-1-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry