一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月25日

CVE-2026-17602 [MEDIUM] – The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerab

未分类
📑 文章目录

The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.7.42 via the ‘file_name’ parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.