CVE-2026-3829

Name of the Vulnerable Software and Affected Versions WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan versions prior to 7.8.5.11

Description Unauthorized modification of data is possible due to missing capability checks in the wple basic get requests() function. Authenticated attackers with subscriber level access or higher can reset the SSL setup state, force the SSL status to appear complete, and modify plan selection options.

Recommendations Update WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan to version 7.8.5.11 or later. As a temporary workaround, restrict access to the wple basic get requests() function to prevent unauthorized modifications.