Plugin icon

SSL Zen — SSL Certificate Installer & HTTPS Redirects

ssl-zen

Vulnerabilities:

8

Last Updated:

September 18, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-24
Title
SSL Zen < 4.7.43 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter
Fixed in
Fixed in 4.7.43
CVSS
4.9 (medium)
Published
2026-09-24
Title
SSL Zen < 4.7.43 - Reflected Cross-Site Scripting via 'uri' Parameter
Fixed in
Fixed in 4.7.43
CVSS
6.1 (medium)
Published
2026-09-18
Title
SSL Zen < 4.7.43 - Reflected Cross-Site Scripting via 'uri' and 'host' Parameters
Fixed in
Fixed in 4.7.43
CVSS
6.1 (medium)
Published
2026-09-09
Title
SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure
Fixed in
Fixed in 4.7.40
CVSS
5.3 (medium)
Published
2026-08-17
Title
SSL Zen — SSL Certificate Installer & HTTPS Redirects < 4.7.43 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.7.43
CVSS
6.1 (medium)
Published
2024-04-17
Title
SSL Zen <= 4.5.3 - Unauthenticated Private Keys Access
Fixed in
Fixed in 4.6.0
CVSS
6.8 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.5.2
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 4.0.5
CVSS
4.3 (medium)