CVE-2026-84775
Received Received - Intake

Unauthenticated Denial of Service in Really Simple SSL

Vulnerability report for CVE-2026-84775, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-02

Last updated on: 2026-09-02

Assigner: Patchstack

Description

Unauthenticated Denial of Service Attack in Really Simple SSL <= 9.8.0 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-02
Last Modified
2026-09-02
Generated
2026-09-02
AI Q&A
2026-09-02
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
really_simple_ssl really_simple_ssl to 9.8.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated Denial of Service (DoS) vulnerability in the Really Simple SSL WordPress plugin versions 9.8.0 and below. It allows attackers to crash or make the website unresponsive without needing authentication, affecting its availability.

Detection Guidance

Check the installed version of Really Simple SSL plugin in WordPress. If it is version 9.8.0 or below, the system is vulnerable. Use WordPress admin panel or run a command like 'wp plugin list' in the WordPress directory to verify the version.

Impact Analysis

The vulnerability can cause your website to crash or become unresponsive, disrupting access for legitimate users. This impacts website availability and may lead to downtime or loss of service.

Mitigation Strategies

Update the Really Simple SSL plugin to version 9.8.1 or later immediately. This patched version resolves the DoS vulnerability. Disable the plugin temporarily if an update is not immediately possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84775. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart