title: Correos Oficial <= 1.2.0.2 - Unauthenticated Arbitrary File Download
description: The Correos Oficial WordPress plugin through 1.2.0.2 does not have an authorization check user input validation when generating a file path, allowing unauthenticated attackers to download arbitrary files from the server.
problem types: CWE-552 Files or Directories Accessible to External Parties
affected:
{
vendor: Unknown
product: Correos Oficial
versions:
status: affected, versionType: custom, version: 0, lessThanOrEqual: 1.2.0.2
defaultStatus: affected
}