CVE-2021-25009CWE-532

CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

published March 7, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01198 · 67.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2022-03-07T08:16Z
EPSS history
Timeline
  • 07 MAR 08:16Z
    CorreosExpress <= 2.6.0 - Sensitive Information Disclosure
    cvelistv5