CVE-2020-12120: Prestashop Correos Express

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers.

Affected products

• Prestashop Correos Express: from 1.6, up to and including 1.7

Published 2020-04-27. Last modified 2026-06-17.