Read the docs

Correos

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Correos records in CISA KEV

No Correos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Correos 1 record MEDIUM Correos Oficial 1 record HIGH

Records

1 record in Correos Oficial · all components

TI-2023-00315 CVE-2023-0331 · GHSA-6hfv-jw53-qrc2

Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Download

Priority HIGH 66

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00849 Published 2023-02-27 No fix listed
Open these records in search →