5.4
Moyenne
CVE-2026-3829 The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is…
Description
The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wple_basic_get_requests' function in all versions up to, and including, 7.8.5.10. This makes it possible for authenticated attackers, with subscriber level access and above, to reset the SSL setup state, force SSL to appear complete, and modify plan selection options.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan 7.8 | premières → 7.8.5.10 | Pas de correctif indiqué |
Autres CVE de WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan
Les 4 CVE de WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Moyenne
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Moyenne
CVE-2023-7046
The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score plugin for WordPress…
7.5
Élevée