Files
CVEs-PoC/2023/CVE-2023-0331.md
T
2025-09-29 21:09:30 +02:00

809 B

CVE-2023-0331

Description

The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.

POC

Reference

Github