Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Really Simple SSL may become unavailable to visitors

CVE-2026-84775 · published 2 months ago
Summary

The Really Simple SSL add‑on for WordPress can be forced to stop working by anyone on the internet, which could make your website inaccessible. This occurs in versions up to 9.8.0. Upgrade to version 9.8.1 or later, or apply the vendor’s patch, to keep the site online.

What to do
  • Update really simple plugins really simple ssl to version 9.8.1.
Affected software
VendorProductAffected versions
really simple plugins really simple ssl <= 9.8.0
Fix: upgrade to 9.8.1
Original advisory text
Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published2 Sep 2026
Updated4 Nov 2026
First seen2 Sep 2026
Sources
CVE-2026-84775 · NVD
CVE-2026-84775 · MITRE
Track software like this
Free during beta