Ctt Expresso Para Woocommerce
The issue concerns the exposure of sensitive information in the CTT Expresso para WooCommerce plugin for WordPress. This exposure occurs via the /wp-content/uploads/cepw directory, where generated .pdf and log files are publicly accessible. These files contain sensitive information such as sender and receiver names, phone numbers, physical addresses, and email addresses.