Lucene search
+L

7 matches found

Vulnrichment
Vulnrichment
added 2026/07/23 9:33 a.m.11 views

CVE-2026-15786 WP Encryption <= 7.8.6.6 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.8.6.6 via the 'imploded' parameter parameter. This makes it possible for authenticated attackers, with...

4.4CVSS5.9AI score0.0041EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/14 5:30 a.m.16 views

CVE-2026-3829

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wplebasicgetrequests' function in all versions up to, and including, 7.8.5.10. This makes...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.32 views

PT-2026-40865

The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on the 'wple basic get requests' function in all versions up to, and including, 7.8.5.10. This...

5.4CVSS5.8AI score0.00202EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/02/05 12:1 a.m.11 views

CVE-2024-4611

The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decryptvalue' and on the 'doCookieAuth' functions in all versions up to, and including, 4.3.2. This makes it possible for unauthenticated attackers to log in as any existing user on the sit...

8.1CVSS6.8AI score0.00501EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/05/07 12:0 a.m.8 views

The vulnerability of the WP Encryption plugin in the WordPress content management system allows attackers to disclose protected information.

The vulnerability of the WP Encryption plugin in the WordPress content management system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

7.8CVSS5.4AI score0.00444EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.5 views

PT-2024-3318 · WordPress · Wp Encryption

Name of the Vulnerable Software and Affected Versions: WP Encryption plugin for WordPress versions up to, and including, 7.0 Description: The issue is related to insufficient protection of internal data, which can be exploited by a remote attacker to disclose protected information. Specifically,...

7.8CVSS6.9AI score0.00444EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.6 views

WordPress Plugin WP Encryption 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

7.5CVSS6.3AI score0.00444EPSS
SaveExploits0References3
Rows per page
Query Builder