Correosexpress Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Correosexpress Project records in CISA KEV

No Correosexpress Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Correosexpress 1 record LOW

Records

1 record

TI-2021-07287 CVE-2021-25009 · GHSA-p632-5p4v-9hh3

CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

LOW 26

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01198 Published 2022-03-07 No fix listed CWE-532

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0