Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-04629
HistoryMar 09, 2022 - 12:00 a.m.

WordPress CorreosExpress plugin information leakage vulnerability

2022-03-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
wordpress
correosexpress
plugin
information
disclosure
vulnerability
php
mysql
servers
attackers
log files
sensitive information
exploitation

EPSS

0.001

Percentile

40.2%

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress CorreosExpress plugin 2.6.0 and previous versions have an information disclosure vulnerability that can be exploited by attackers to generate publicly accessible The vulnerability can be exploited to generate publicly accessible log files that contain sensitive information.

EPSS

0.001

Percentile

40.2%