CVE-2023-0331

Name of the Vulnerable Software and Affected Versions Correos Oficial WordPress plugin versions 1.2.0.2 and earlier

Description The issue allows unauthenticated attackers to download arbitrary files from the server due to a lack of authorization check and user input validation when generating a file path.

Recommendations For Correos Oficial WordPress plugin versions 1.2.0.2 and earlier, update to a version that includes the necessary authorization checks and input validation to prevent arbitrary file downloads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.