6.5
Medium
CVE-2024-3749 The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in…
Description
The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SP Project & Document Manager 4.71 | earliest → 4.71 | No fix stated |
| sp_project_\&_document_manager 4.71 | earliest → 4.71 | No fix stated |
Other CVEs of SP Project & Document Manager
The 5 CVEs of SP Project & Document Manager →
CVE-2024-3748
The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a…
6.5
Medium
CVE-2022-1551
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad…
Not rated
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to…
Not rated
CVE-2021-24347
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin…
Not rated