Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 03:16:48 +0000 CVE-2026-86781 — SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure https://vulnerability.circl.lu/vuln/cve-2026-86781 <p><strong>Affected:</strong> Unknown SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects</p> <p>The SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site&#39;s TLS private key, certificates, and diagnostic logs.</p> <p><strong>Affected:</strong> Unknown SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects</p> <p>The SSL Zen — SSL Certificate Installer &amp; HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site&#39;s TLS private key, certificates, and diagnostic logs.</p> https://vulnerability.circl.lu/vuln/cve-2026-86781