EXPLOIT/ALERT Back to feed

Really Simple Security 9.1.1.1 - Authentication Bypass

Really Simple Security 9.1.1.1 - Authentication Bypass

Published 10 Oct 2026Updated 10 Oct 2026302 sources
CVSS 9.8 ✓ VERIFIED REFERENCE
Overview Sources History

What happened

Auth and 2FA bypass in Really Simple Security WordPress plugin enabling 0-click RCE.

Affected versions

Unknown product: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

  • Review the original advisory and validate affected versions.
  • Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference
Exploit-DB 52207Really Simple Security 9.1.1.1 - Authentication BypassAntonio Francesco Sardella2025-04-15VerifiedSploitusAuth and 2FA bypass in Really Simple Security WordPress plugin enabling 0-click RCE.KitPloit2026-10-07T14:15:14Candidatekitploit.comAuth and 2FA bypass in Really Simple Security WordPress plugin enabling 0-click RCE.ru2026-10-07T14:15:14CandidatePoC-in-GitHub · RandomRobbieBF/CVE-2024-10924Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass★ 4RandomRobbieBF2024-11-14CandidatePoC-in-GitHub · m3ssap0/wordpress-really-simple-security-authn-bypass-vulnerable-applicationWARNING: This is a vulnerable application to test the exploit for the Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924). Run it at your own risk!★ 8m3ssap02024-11-18CandidatePoC-in-GitHub · MattJButler/CVE-2024-10924Simple Python script★ 0MattJButler2024-11-19CandidatePoC-in-GitHub · m3ssap0/wordpress-really-simple-security-authn-bypass-exploitExploits Really Simple Security < 9.1.2 authentication bypass (CVE-2024-10924).★ 20m3ssap02024-11-19CandidatePoC-in-GitHub · julesbsz/CVE-2024-10924POC for CVE-2024-10924 written in Python★ 0julesbsz2024-11-20CandidatePoC-in-GitHub · Trackflaw/CVE-2024-10924-Wordpress-DockerVulnerable docker container for Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 – 9.1.1.1 – Authentication Bypass CVE-2023-50164★ 3Trackflaw2024-11-20CandidatePoC-in-GitHub · Maalfer/CVE-2024-10924-PoCBypass del MFA en WordPress con el plugin Really Simple Security instalado entre las versiones 9.0.0 – 9.1.1.1.★ 6Maalfer2024-11-27CandidatePoC-in-GitHub · D1se0/CVE-2024-10924-Bypass-MFA-Wordpress-LAB★ 4D1se02024-12-01CandidatePoC-in-GitHub · Hunt3r850/CVE-2024-10924-PoC★ 0Hunt3r8502024-12-03CandidatePoC-in-GitHub · Hunt3r850/CVE-2024-10924-Wordpress-Docker★ 0Hunt3r8502024-12-03CandidatePoC-in-GitHub · Nxploited/CVE-2024-10924-ExploitReally Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass★ 2Nxploited2025-02-02CandidatePoC-in-GitHub · cy3erdr4g0n/CVE-2024-10924★ 0cy3erdr4g0n2025-02-05CandidatePoC-in-GitHub · h8sU/wordpress-cve-2024-10924-exploitA Proof-of-Concept (PoC) exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication (2FA). Includes mitigation techniques to secure affected WordPress sites.★ 2h8sU2025-02-14CandidatePoC-in-GitHub · sariamubeen/CVE-2024-10924★ 0sariamubeen2025-02-17CandidatePoC-in-GitHub · MaleeshaUdan/wordpress-CVE-2024-10924--exploitWordPress CVE-2024-10924 Exploit for Really Simple Security plugin★ 1MaleeshaUdan2025-02-23CandidatePoC-in-GitHub · d0x-awrqxavc/-CVE-2024-10924★ 0d0x-awrqxavc2025-04-06CandidatePoC-in-GitHub · ademto/wordpress-cve-2024-10924-pentest★ 3ademto2025-06-25CandidatePoC-in-GitHub · bodoinon/CVE-2024-10924★ 0bodoinon2025-12-28CandidatePoC-in-GitHub · JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-10924Unauthenticated authentication bypass to RCE exploit for CVE-2024-10924. Abuses an authentication and 2FA bypass in the Really Simple Security WordPress plugin to impersonate an admin user, upload a malicious plugin, and achieve remote command execution via an interactive shell.★ 14JoshuaProvoste2026-01-22CandidatePoC-in-GitHub · rafaelsoje/infosec-audit-toolsFerramentas de auditoria em segurança da informação, reconhecimento de superfície com RDAP/DNS e análise defensiva web (CVE-2024-10924).★ 1rafaelsoje2026-10-16Candidate
CorrectionsReport an issue