CVE-2026-86781
Received Received - Intake

SSL Private Key Exposure in SSL Zen WordPress Plugin

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: WPScan

Description
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site's TLS private key, certificates, and diagnostic logs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-11
Last Modified
2026-09-11
Generated
2026-09-11
AI Q&A
2026-09-11
EPSS Evaluated
N/A
NVD
CVE-2026-86781
EUVD
EUVD-2026-75970

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ssl_zen ssl_certificate_installer to 4.7.40 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The SSL Zen WordPress plugin before version 4.7.40 has a vulnerability where any authenticated user, including low-privilege Subscribers, can download the site's TLS private key, certificates, and diagnostic logs. This happens because the plugin lacks capability or nonce checks in a certificate-file download routine that runs early in the WordPress admin request lifecycle.

Detection Guidance

Check the installed version of the SSL Zen plugin in WordPress. If it is below 4.7.40, the vulnerability is present. Logs or admin activity may show unauthorized file downloads of TLS private keys or certificates.

Impact Analysis

An attacker could exploit this to steal sensitive data like TLS private keys, certificates, and logs. This could allow them to decrypt encrypted traffic, impersonate your website, or gain further access to your system. Even low-privilege users like Subscribers can perform this attack.

Compliance Impact

This vulnerability could lead to a data breach, violating GDPR and HIPAA requirements for protecting sensitive data. Exposure of TLS private keys and certificates may result in non-compliance, potential fines, and reputational damage.

Mitigation Strategies

Update the SSL Zen plugin to version 4.7.40 or later immediately. Remove any unauthorized access to sensitive files and review user roles for suspicious activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86781. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart