'Really Simple Security' is a widely-used WordPress plugin with over four million active installations.The plugin has a critical authentication bypass vulnerability (CVE-2024-10924) that allows attackers to gain admin-level access.The vulnerability affects versions 9.0.0 to 9.1.1.1 of the plugin.Wordfence recommends updating to version 9.1.2 immediately to mitigate the risk.