Skip to content
PluginCanary

Really Simple Security

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)
by Really Simple Plugins · 3,000,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 26 Oct 2026, 51 releases in 24 months, no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for Really Simple Security
Ownership100
Maintenance100
Security50
Support100
Reputation85

How the score works

Quick answers

Is Really Simple Security still maintained?
Yes. Last release 26 Oct 2026, 51 releases in the last 24 months. 26 Oct 2026 · wordpress.org
Who owns Really Simple Security, and has it changed hands?
No change recorded. Main committer RogierLankhorst since Mar 2015. 4 Nov 2026 · SVN log
Was Really Simple Security removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Really Simple Security safe?
13 known vulnerabilities, all fixed (latest in 9.8.3). Not on the exploited list. 16 Sep 2026 · Wordfence Intelligence
Is the latest Really Simple Security update safe to install?
No ownership change before 9.8.4. No one-star spike after it. 26 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
RogierLankhorst15 Mar 2015 to 28 Nov 2024, 428 commits
hesseldejong9 Aug 2023 to 26 Aug 2024, 4 commits
markwolters5 Nov 2024 to 26 Oct 2026, 52 commits
wimbraam20 Jan 2025 to 8 Jul 2025, 17 commits
marcelsanting31 Mar 2025 to 15 Sep 2026, 48 commits

5 committers recorded. No ownership change since 2015.

Maintenance

Last release
9 days ago
Releases, 24 months
51
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Really Simple Security
Q1 20242
Q2 20244
Q3 20246
Q4 20244
Q1 20254
Q2 20250
Q3 202512
Q4 20250
Q1 20261
Q2 20260
Q3 202627
Q4 20263

Last release 26 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.7 (14 reviews). Lifetime: 4.9.

Average rating per quarter for Really Simple Security
Q2 20264.5
Q3 20264.6
Q4 20265.0

Average rating rose from 4.5 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star8629
4 star108
3 star25
2 star19
1 star89
Latest low reviews

Security record

12 vulnerabilities in 24 months (13 on record), all patched (latest fixed in 9.8.3).

Show 13 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Sep 2026Really Simple Security (Free) <= 9.8.2 - Unauthenticated Unbounded Option Growth5.3<= 9.8.29.8.3Patched before disclosure
14 Sep 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) <= 9.8.1 - Missing Authorization to 2FA Bypass4.3<= 9.8.19.8.2Patched before disclosure
11 Sep 2026Really Simple Security <= 9.8.0 - Unauthenticated Two-Factor Authentication Bypass5.3<= 9.8.09.8.1Patched before disclosure
2 Sep 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) <= 9.8.0 - Unauthenticated Denial of Service7.5<= 9.8.09.8.1Patched before disclosure
2 Sep 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) <= 9.8.0 - Unauthenticated Two-Factor Authentication Bypass5.3<= 9.8.09.8.1Patched before disclosure
31 Aug 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) < 9.8.0 - Authenticated (Custom Role+) Remote Code Execution8.8< 9.8.09.8.0Patched before disclosure
12 Jun 2026Really Simple Security <= 9.5.10.0 - Two Factor Authentication Bypass5.3<= 9.5.10.09.5.10.188
3 Jun 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) <= 9.5.10 - Missing Authorization5.3<= 9.5.109.5.10.197
3 Jun 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) <= 9.5.9 - Missing Authorization4.3<= 9.5.99.5.1055
15 Mar 2026Really Simple Security - Simple and Performant Security (formerly Really Simple SSL) <= 9.5.7 - Missing Authorization4.3<= 9.5.79.5.8225
24 Jan 2025Really Simple SSL <= 9.1.4 - Cross-Site Request Forgery4.3<= 9.1.49.2.0235
14 Nov 2024Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass9.89.0.0 to 9.1.1.19.1.2306
16 Apr 2024Really Simple SSL <= 7.2.3 - Authenticated (Admin+) Server-Side Request Forgery5.5<= 7.2.38.0.0154

Changelog mentions of security fixes: 9.6.1 (vulnerability); 9.5.1 (security); 9.7.0 (vulnerability); 9.8.1 (security, nonce); 9.4.3 (vulnerability).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 6 support threads resolved in the last 2 months.

Momentum

3,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Really Simple Security
4 May 2026144,161
11 May 2026178,940
18 May 2026204,648
25 May 2026120,952
1 Jun 2026110,339
8 Jun 2026325,869
15 Jun 20261,130,642
22 Jun 2026200,917
29 Jun 2026148,794
6 Jul 20261,191,620
13 Jul 2026188,926
20 Jul 2026150,287
27 Jul 20261,150,212
3 Aug 2026257,668
10 Aug 2026126,772
17 Aug 2026114,343
24 Aug 20261,145,101
31 Aug 20261,231,884
7 Sep 2026180,857
14 Sep 20262,113,359
21 Sep 2026209,207
28 Sep 2026133,261
5 Oct 2026112,636
12 Oct 202689,909
19 Oct 2026134,993
26 Oct 20261,242,786
2 Nov 202637,740

Weekly downloads over the last 4 weeks are 18% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SSL Insecure Content FixerScore 100 · 100,000+Easy HTTPS Redirection (SSL)Score 98 · 100,000+WP Force SSL & HTTPS SSL RedirectScore 93 · 80,000+WP EncryptionScore 91 · 50,000+

Facts

Version9.8.4
AuthorReally Simple Plugins
Added15 Mar 2015
Last updated26 Oct 2026
Active installs3,000,000+
Requires WordPress6.6
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tags2FA, https, security, two factor, vulnerabilities

Other plugins by this author: Metricool - Social media and site statistics, SimplyBook.me - Booking and reservations calendar, Leadinfo

Questions

Is Really Simple Security still maintained?

Yes. Last release 26 Oct 2026, 51 releases in the last 24 months.

Who owns Really Simple Security, and has it changed hands?

No change recorded. Main committer RogierLankhorst since Mar 2015.

Was Really Simple Security removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Really Simple Security safe?

13 known vulnerabilities, all fixed (latest in 9.8.3). Not on the exploited list.

Is the latest Really Simple Security update safe to install?

No ownership change before 9.8.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue