Skip to content
OpenAdvisories
Unscored CVE-2021-25009 EUVD-2021-11921GHSA-p632-5p4v-9hh3

CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

Published Mar 7, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses

Affected products

VendorProductAffectedFixed
— CorreosExpress – Shipping Management – Tags 2.6.0 – ≤ 2.6.0 —

References