// For flags

CVE-2024-10924

Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

13
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Attend
*SSVC
Descriptions

The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default).

*Credits: István Márton
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:Attend
Exploitation
None
Automatable
Yes
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2024-11-06 CVE Reserved
  • 2024-11-14 CVE Published
  • 2024-11-19 CVE Updated
  • 2024-11-19 First Exploit
  • 2024-12-07 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-288: Authentication Bypass Using an Alternate Path or Channel
CAPEC
References (20)
URL Tag Source
https://plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L277
https://plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L278
https://plugins.trac.wordpress.org/browser/really-simple-ssl/tags/9.1.1.1/security/wordpress/two-fa/class-rsssl-two-factor-on-board-api.php#L67
https://plugins.trac.wordpress.org/changeset/3188431/really-simple-ssl
https://www.wordfence.com/threat-intel/vulnerabilities/id/7d5d05ad-1a7a-43d2-bbbf-597e975446be?source=cve
https://www.wordfence.com/blog/2024/11/really-simple-security-vulnerability
https://www.wordfence.com/threat-intel/vulnerabilities/detail/really-simple-security-free-pro-and-pro-multisite-900-9111-authentication-bypass
URL Date SRC
https://github.com/m3ssap0/wordpress-really-simple-security-authn-bypass-exploit 2024-11-19
https://packetstorm.news/files/id/183035 2024-12-09
https://github.com/RandomRobbieBF/CVE-2024-10924 2024-11-21
https://github.com/m3ssap0/wordpress-really-simple-security-authn-bypass-vulnerable-application 2024-11-25
https://github.com/MattJButler/CVE-2024-10924 2024-11-19
https://github.com/Trackflaw/CVE-2024-10924-Wordpress-Docker 2024-11-25
https://github.com/Maalfer/CVE-2024-10924-PoC 2024-11-30
https://github.com/D1se0/CVE-2024-10924-Bypass-MFA-Wordpress-LAB 2024-12-04
https://github.com/Hunt3r850/CVE-2024-10924-PoC 2024-12-03
https://github.com/Hunt3r850/CVE-2024-10924-Wordpress-Docker 2024-11-27
https://github.com/FoKiiin/CVE-2024-10924 2024-11-24
https://github.com/dua1337/Exploit-for-CVE-2024-10924 2024-11-21
https://github.com/julesbsz/CVE-2024-10924 2024-11-20
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Really Simple Plugins
Search vendor "Really Simple Plugins"
 Really Simple Security Pro Multisite
Search vendor "Really Simple Plugins" for product "Really Simple Security Pro Multisite"
 >= 9.0.0.0 <= 9.1.1.1
Search vendor "Really Simple Plugins" for product "Really Simple Security Pro Multisite" and version " >= 9.0.0.0 <= 9.1.1.1"
en
Affected
Rogierlankhorst
Search vendor "Rogierlankhorst"
 Really Simple Security – Simple And Performant Security (formerly Really Simple SSL)
Search vendor "Rogierlankhorst" for product "Really Simple Security – Simple And Performant Security (formerly Really Simple SSL)"
 >= 9.0.0.0 <= 9.1.1.1
Search vendor "Rogierlankhorst" for product "Really Simple Security – Simple And Performant Security (formerly Really Simple SSL)" and version " >= 9.0.0.0 <= 9.1.1.1"
en
Affected
Really Simple Plugins
Search vendor "Really Simple Plugins"
 Really Simple Security Pro
Search vendor "Really Simple Plugins" for product "Really Simple Security Pro"
 >= 9.0.0.0 <= 9.1.1.1
Search vendor "Really Simple Plugins" for product "Really Simple Security Pro" and version " >= 9.0.0.0 <= 9.1.1.1"
en
Affected