CVE-2026-15463

Name of the Vulnerable Software and Affected Versions SSL Zen — SSL Certificate Installer & HTTPS Redirects versions prior to 4.7.43

Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Reflected Cross-Site Scripting (XSS), a technique where malicious scripts are injected into a web page and executed in the victim's browser. This occurs via the host parameter and is only exploitable when the plugin is in the system requirements stage. An attacker can execute these scripts by tricking a user into clicking a malicious link.

Recommendations Update SSL Zen — SSL Certificate Installer & HTTPS Redirects to version 4.7.43 or later.