nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-48969 CVE-2026-48969
MEDIUM
WordPress Really Simple SSL plugin <= 9.5.9 - Broken Access Control vulnerability
Record summary
CVE-2026-48969 has a selected CVSS score of 6.5 (medium).
Description
Subscriber Broken Access Control in Really Simple SSL <= 9.5.9 versions.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jun 15, 2026 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 15, 2026 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
Really Simple SSLBrowse Really Simple Plugins B.V. / Really Simple SSLDefault status: unaffected | CVE List | Through 9.5.9 | affected |
Really Simple SSLBrowse Really Simple Plugins B.V. / Really Simple SSL | VulnCheck | Version data not supplied | |
References
2patchstack.comvdb entry
https://patchstack.com/database/wordpress/plugin/really-simple-ssl/vulnerability/wordpress-really-simple-ssl-plugin-9-5-9-broken-access-control-vulnerability?_s_id=cve