CorreosExpress <= 2.6.0 - Sensitive Information Disclosure
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
exploitation probability
1.2%top 35% of all CVEs
observed exploitation
nono source reports it
The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses
Affected products
Unknown · CorreosExpress – Shipping Management – Tags