https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 17:10:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341046 EUVD-2026-341046 https://cve.radiocsirt.org/vuln/euvd-2026-341046 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15786 <p>The WP Encryption – One Click Free SSL Certificate &amp; SSL / HTTPS Redirect, Security &amp; SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the &#39;imploded&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Although file write content is passed through esc_html(), which encodes angle brackets and prevents direct PHP execution, plaintext configuration files such as .htaccess are fully writable and exploitable for denial-of-service or redirect attacks. This is only exploitable when the premium version of the software is enabled and active.</p> <p>The WP Encryption – One Click Free SSL Certificate &amp; SSL / HTTPS Redirect, Security &amp; SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the &#39;imploded&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Although file write content is passed through esc_html(), which encodes angle brackets and prevents direct PHP execution, plaintext configuration files such as .htaccess are fully writable and exploitable for denial-of-service or redirect attacks. This is only exploitable when the premium version of the software is enabled and active.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15786 https://cve.radiocsirt.org/vuln/ghsa-wm9c-p6mf-fr7c <p>The WP Encryption – One Click Free SSL Certificate &amp; SSL / HTTPS Redirect, Security &amp; SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the &#39;imploded&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Although file write content is passed through esc_html(), which encodes angle brackets and prevents direct PHP execution, plaintext configuration files such as .htaccess are fully writable and exploitable for denial-of-service or redirect attacks.</p> <p>The WP Encryption – One Click Free SSL Certificate &amp; SSL / HTTPS Redirect, Security &amp; SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the &#39;imploded&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Although file write content is passed through esc_html(), which encodes angle brackets and prevents direct PHP execution, plaintext configuration files such as .htaccess are fully writable and exploitable for denial-of-service or redirect attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-wm9c-p6mf-fr7c