CVE-2024-6687
—CVSS 3.1
7.5 high
EPSS
<1%p35
Published
()
Modified
Description
The CTT Expresso para WooCommerce plugin for WordPress is vulnerable to sensitive information exposure in all versions up to and including 3.2.12 via the /wp-content/uploads/cepw directory. The generated .pdf and log files are publicly accessible and contain sensitive information such as sender and receiver names, phone numbers, physical addresses, and email addresses
- Vendors
- thisfunctional
- Products
- ctt expresso para woocommerce
- Ecosystems
- WordPress, E-commerce
- Weakness
- CWE-200, CWE-532
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.