GetSimple CMS Security Vulnerabilities Notification

[WebDevandPhoto]

Interesting, so these security risk are more or less developed around the concept of behavioral engineering. In that people do unintelligent things quite often. I'm not a security expert, but would applying a deny all allow from IP (an admin whitelist) in .htaccess for the admin files fix most of these type of exploits?