Skip to content
OpenAdvisories

Vendor

limpinho

1 known vulnerabilities.

Products

CTT Expresso para WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6687

    CTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory

    The CTT Expresso para WooCommerce plugin for WordPress is vulnerable to sensitive information exposure in all versions up to and including 3.2.12 via the /wp-content/uploads/cepw directory. The generated .pdf and log files are publicly accessible and contain …

    limpinho CTT Expresso para WooCommerce Web / CMS