Medium severity6.5NVD Advisory· Published May 8, 2024· Updated Jun 17, 2026
CVE-2024-1076
CVE-2024-1076
Description
The SSL Zen WordPress plugin before 4.6.0 does not properly prevent directory listing of the private keys folder, as it only relies on the use of .htaccess to prevent visitors from accessing the site's generated private keys, which allows an attacker to read them if the site runs on a server who doesn't support .htaccess files, like NGINX.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- WordPress/SSL Zen plugindescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/9c3e9c72-3d6c-4e2c-bb8a-f4efce1371d5/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.