CVE-2024-1076

The SSL Zen WordPress plugin versions prior to 4.6.0 are vulnerable to unauthenticated private keys access. The root cause is that the plugin relies exclusively on .htaccess files to restrict access to the folder containing generated private keys. On web servers that do not support .htaccess, suc...