Non notée
CVE-2022-1551 The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad…
Description
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SP Project & Document Manager 4.58 | premières → < 4.58 | 4.58 |
Autres CVE de SP Project & Document Manager
Les 5 CVE de SP Project & Document Manager →
CVE-2024-3748
The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a…
6.5
Moyenne
CVE-2024-3749
The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in…
6.5
Moyenne
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to…
Non notée
CVE-2021-24347
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin…
Non notée