CVE-2021-25009: vulnerability in CorreosExpress – Shipping Management – Tags
CorreosExpress <= 2.6.0 - Sensitive Information Disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses
Affected products
Unknown · CorreosExpress – Shipping Management – Tags