Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25009

CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

Description

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown CorreosExpress – Shipping Management – Tags

  • 2.6.0 to ≤ 2.6.0affected

References