The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses
[
{
"product": "CorreosExpress – Shipping Management – Tags",
"vendor": "Unknown",
"versions": [
{
"lessThanOrEqual": "2.6.0",
"status": "affected",
"version": "2.6.0",
"versionType": "custom"
}
]
}
]