CVE-2021-25009: Correosexpress Project Correosexpress

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The CorreosExpress WordPress plugin through 2.6.0 generates log files which are publicly accessible, and contain sensitive information such as sender/receiver names, phone numbers, physical and email addresses

Affected products

• Correosexpress Project Correosexpress: up to and including 2.6.0

Published 2022-03-07. Last modified 2026-06-17.