Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-10924-Wordpress-Docker — Dockerized exploit environment for CVE-2024-10924, an authentication bypass in WordPress Really Simple Security plugin (versions 9.0.0-9.1.1.1) allowing unauthenticated admin login. | Kitploit
Tools/GitHubGitHub/hunt3r850/cve-2024-10924-wordpress-docker
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingAuthenticationLearning & EducationLabs & Practice
GitHubhunt3r850/cve-2024-10924-wordpress-docker

CVE-2024-10924-Wordpress-Docker

Dockerized exploit environment for CVE-2024-10924, an authentication bypass in WordPress Really Simple Security plugin (versions 9.0.0-9.1.1.1) allowing unauthenticated admin login.

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-10924 : Wordpress Really Simple Security authentication bypass flaw in Docker

Description

The Really Simple Security plugins (Free, Pro, and Pro Multisite) for WordPress, versions 9.0.0 to 9.1.1.1, are affected by an authentication bypass vulnerability.

This issue arises from improper error handling in the check_login_and_get_user function used in two-factor REST API actions.

As a result, unauthenticated attackers can potentially log in as any existing user, including administrators, if the "Two-Factor Authentication" feature is enabled (disabled by default).

Vulnerable docker

root@kitploit:~
git clone [email protected]:Trackflaw/CVE-2024-10924-Wordpress-Docker.git
cd CVE-2024-10924-Wordpress-Docker
docker compose up --build

Video

https://github.com/user-attachments/assets/124a4916-b0ba-472a-b880-63e774f809bd

Download Tool