https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 15:31:15 +0000 https://cve.radiocsirt.org/vuln/cve-2026-15786 <p><strong>Affected:</strong> gowebsmarty WP Encryption – Lifetime Free SSL Cert &amp; HTTPS, Force SSL / HTTPS Redirect, SSL Security</p> <p>The WP Encryption – One Click Free SSL Certificate &amp; SSL / HTTPS Redirect, Security &amp; SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the &#39;imploded&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Although file write content is passed through esc_html(), which encodes angle brackets and prevents direct PHP execution, plaintext configuration files such as .htaccess are fully writable and exploitable for denial-of-service or redirect attacks. This is only exploitable when the premium version of the software is enabled and active.</p> <p><strong>Affected:</strong> gowebsmarty WP Encryption – Lifetime Free SSL Cert &amp; HTTPS, Force SSL / HTTPS Redirect, SSL Security</p> <p>The WP Encryption – One Click Free SSL Certificate &amp; SSL / HTTPS Redirect, Security &amp; SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the &#39;imploded&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Although file write content is passed through esc_html(), which encodes angle brackets and prevents direct PHP execution, plaintext configuration files such as .htaccess are fully writable and exploitable for denial-of-service or redirect attacks. This is only exploitable when the premium version of the software is enabled and active.</p> https://cve.radiocsirt.org/vuln/cve-2026-15786