The WP Free SSL plugin for WordPress, which provides a free SSL certificate and forces HTTPS on websites, has a security flaw that allows unauthorized access. This vulnerability affects all versions up to 1.2.6, allowing unauthenticated attackers to perform actions without permission.