The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/ce2e3503-9a06-4f5c-ae0f-f40e7dfb2903 | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2022-03-07 09:15
Updated : 2024-02-28 19:09
NVD link : CVE-2021-25009
Mitre link : CVE-2021-25009
CVE.ORG link : CVE-2021-25009
JSON object : View
Products Affected
correosexpress_project
- correosexpress
CWE
CWE-532
Insertion of Sensitive Information into Log File