Description
The SSL Zen WordPress plugin before 4.6.0 does not properly prevent directory listing of the private keys folder, as it only relies on the use of .htaccess to prevent visitors from accessing the site's generated private keys, which allows an attacker to read them if the site runs on a server who doesn't support .htaccess files, like NGINX.
INFO
Published Date :
2024-05-08T06:00:02.175Z
Last Modified :
2025-03-25T19:06:42.370Z
Source :
WPScan
AFFECTED PRODUCTS
The following products are affected by CVE-2024-1076 vulnerability.
| Vendors | Products |
|---|---|
| Sslzen |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-1076.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact