What is GHSA-x5q6-8482-f3j8?

GHSA-x5q6-8482-f3j8 is a security advisory published by GitHub Security Advisories with unknown severity. The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check...

Which CVE IDs does GHSA-x5q6-8482-f3j8 cover?

GHSA-x5q6-8482-f3j8 covers the following CVE IDs: CVE-2026-108064. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-x5q6-8482-f3j8unknown

The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check...

Vendor

GitHub Security Advisories

Published

October 14, 2026

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-108064 →

📋 Description

The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on one of the handlers that drives its SSL certificate-provisioning routine, allowing unauthenticated users to make the WP Encryption WordPress plugin before 7.8.8.2 overwrite the site's certificate private key and replace its pending Let's Encrypt order and challenge material with a single request. Repeated requests keep regenerating the material, preventing the administrator from completing certificate issuance.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-108064
https://wpscan.com/vulnerability/5657137d-f496-43f7-9067-e05b99c36006
https://github.com/advisories/GHSA-x5q6-8482-f3j8