Plugin icon

WP Encryption: SSL, HTTPS & Free SSL

wp-letsencrypt-ssl

Vulnerabilities:

7

Last Updated:

October 16, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-10-12
Title
WP Encryption < 7.8.8.2 - Unauthenticated Certificate Private Key and ACME Order Replacement via wple_auto_handler
Fixed in
Fixed in 7.8.8.2
CVSS
6.5 (medium)
Published
2026-07-22
Title
WP Encryption < 7.8.6.7 - Authenticated (Administrator+) Arbitrary File Write via 'imploded' Parameter
Fixed in
Fixed in 7.8.6.7
CVSS
4.4 (medium)
Published
2026-05-13
Title
WP Encryption - One Click SSL & Force HTTPS < 7.8.5.11 - Missing Authorization to Authenticated (Subscriber+) SSL Setup Tampering
Fixed in
Fixed in 7.8.5.11
CVSS
5.4 (medium)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 7.7.3
CVSS
7.1 (high)
Published
2024-04-09
Title
WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect to Force HTTPS, SSL Score < 7.1.0 - Sensitive Information Exposure via insufficiently protected files
Fixed in
Fixed in 7.1.0
CVSS
7.5 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 6.3.0
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 5.7.10
CVSS
4.3 (medium)