Log out
Get PRO

Latest

Authentication vulnerability in SSL Zen – Free Let's Encrypt SSL Certificate & HTTPS/SSL Redirect WordPress Plugin 4.5.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: April 17, 2024

The SSL Zen plugin for WordPress, which allows for free Let’s Encrypt SSL certificates and HTTPS/SSL redirection, has a security vulnerability. This means that in versions up to 4.5.0, sensitive information such as private keys can be accessed by unauthorized individuals due to the unsafe storage of keys.

Detected in:

SSL Certificate – Free SSL, HTTPS by SSL Zen fixed vulnerable versions:
SSL Zen – Free Let's Encrypt SSL Certificate & HTTPS/SSL Redirect WordPress Plugin fixed vulnerable versions: >= * <= 4.5.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.