Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 08:41:53 +0000 CVE-2026-17602 — SSL Zen <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter https://vulnerability.circl.lu/vuln/cve-2026-17602 <p><strong>Affected:</strong> sslzen SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects</p> <p>The SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the &#39;file_name&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.</p> <p><strong>Affected:</strong> sslzen SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects</p> <p>The SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the &#39;file_name&#39; parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.</p> https://vulnerability.circl.lu/vuln/cve-2026-17602