Really Simple Plugins B.V. Really Simple Security Pro Authorization Bypass Vulnerability Allowing Insecure Direct Object References

A vulnerability allowing authorization bypass through user-controlled keys has been identified in the Really Simple Security Pro plugin by Really Simple Plugins B.V. This issue arises from incorrectly configured access control security levels, potentially allowing unauthorized access to sensitive data or functionalities. The vulnerability affects versions of the plugin from an unspecified version up to and including 9.5.4.0.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or database interactions, bypassing normal access controls.

Remediation

Users of the Really Simple Security Pro plugin should update to version 9.5.4.1 or later. Patchstack users can enable auto-update for vulnerable plugins.