5.4
Medium
CVE-2026-3829 The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is…
Description
The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wple_basic_get_requests' function in all versions up to, and including, 7.8.5.10. This makes it possible for authenticated attackers, with subscriber level access and above, to reset the SSL setup state, force SSL to appear complete, and modify plan selection options.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan 7.8 | earliest → 7.8.5.10 | No fix stated |
Other CVEs of WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan
The 4 CVEs of WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Medium
CVE-2023-7046
The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin for WordPress…
7.5
High