WordPress CorreosExpress plugin information leakage vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress CorreosExpress plugin 2.6.0 and previous...

Design/Logic Flaw

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...

CVE-2021-25009

The CVE-2021-25009 entry concerns the WordPress CorreosExpress plugin (versions up to 2.6.0). The vulnerability is information disclosure via publicly accessible log files containing sender/receiver names, phone numbers, and addresses. Connected sources confirm the issue arises from log file expo...

CVE-2021-25009 CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses...

CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

The plugin generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses https://example.com/wp-content/plugins/correos-express/log/logcronfunction.txt...

CorreosExpress <= 2.6.0 - Sensitive Information Disclosure

The plugin generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses PoC https://example.com/wp-content/plugins/correos-express/log/logcronfunction.txt...

WordPress CorreosExpress plugin <= 2.6.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered by José Aguilera in WordPress CorreosExpress plugin versions = 2.6.0. Solution Deactivate and delete. This plugin has been closed as of November 29, 2021 and is not available for download. Reason: Security Issue...