Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Correos Component: Correos Oficial Clear all filters
TI-2023-00315 CVE-2023-0331 · GHSA-6hfv-jw53-qrc2

Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Download

Priority HIGH 66

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00849 Published 2023-02-27 No fix listed