Medium · 6.5 CVE-2026-48969 EUVD-2026-36723GHSA-cmjx-cfrh-588x

WordPress Really Simple SSL plugin <= 9.5.9 - Broken Access Control vulnerability

Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack

Vendor: Really Simple Plugins Product: Really Simple SSL

Description

Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.

Affected products

Vendor	Product	Affected	Fixed
Really Simple Plugins	Really Simple SSL	≤ 9.5.9	—

References

https://patchstack.com/database/wordpress/plugin/really-simple-ssl/vulnerability/wordpress-really-simple-ssl-plugin-9-5-9-broken-access-control-vulnerability?_s_id=cve vdb-entry