Vulnerability · Published Sep 11, 2026 · Assigned by WPScan

CVE-2026-86781SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure

Medium 5.3

In plain English

A medium-severity improper authentication in SSL Zen — SSL Certificate Installer & HTTPS Redirects from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.2%top 92.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site's TLS private key, certificates, and diagnostic logs.

Affected products (as reported)

Vendor	Product	Versions
Unknown	SSL Zen — SSL Certificate Installer & HTTPS Redirects	0 – before 4.7.40

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://wpscan.com/vulnerability/858977f8-8ea3-4d3d-8967-31567f6786ff/ exploit, vdb-entry, technical-description