Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-86781 2 Unknown, Wordpress 2 Ssl Zen — Ssl Certificate Installer & Https Redirects, Wordpress 2026-09-13 5.3 Medium
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site's TLS private key, certificates, and diagnostic logs.