Critical · published November 15, 2024
CVSS calls it critical at 9.8. It sits in the 99.7th percentile for exploit probability.
🚨 An unauthenticated attacker can hijack any user session on WordPress sites running versions 9.0.0 to 9.1.1.1 of the Really Simple Security plugin! 🔥 This is like a hotel with a faulty security system — an intruder can waltz in without a keycard and access any room, including the penthouse suite. The two-factor authentication is supposed to keep the intruders out, but it’s like having a broken lock on the main door! This vulnerability allows attackers to log in as any existing user, including administrators, which could lead to devastating consequences such as data theft, site defacement, or even complete control over the site. Imagine waking up to find your website is now an ad for a competitor — absolutely devastating!
This is like a hotel with a faulty security system — an intruder can waltz in without a keycard and access any room, including the penthouse suite. The two-factor authentication is supposed to keep the intruders out, but it’s like having a broken lock on the main door! The issue stems from improper error handling in the 'check_login_and_get_user' function within the two-factor REST API actions. This flaw allows unauthenticated requests to bypass user authentication altogether when two-factor authentication is enabled.
This vulnerability allows attackers to log in as any existing user, including administrators, which could lead to devastating consequences such as data theft, site defacement, or even complete control over the site. Imagine waking up to find your website is now an ad for a competitor — absolutely devastating! Immediately update the Really Simple Security plugin to version 9.1.1.2 to patch this vulnerability. Also, consider disabling two-factor authentication until the plugin is updated, and review user role settings to ensure no unauthorized access is granted. You've got this! Follow these steps, and your site will be more secure in no time! 🛡️