The SSL Zen WordPress plugin before 4.6.0 does not properly prevent directory listing of the private keys folder, as it only relies on the use of .htaccess to prevent visitors from accessing the site's generated private…
CVSS 3.1MEDIUM 6.5·Network·No auth·No interaction·EPSS 0.00413·Published 2024-05-08·Fixed in 4.6.0CWE-306