6.5
Moyenne
CVE-2024-3748 The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a…
Description
The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a user to manipulate the `user_id` to make it appear that a file was uploaded by another user
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SP Project & Document Manager 4.71 | premières → 4.71 | Pas de correctif indiqué |
| sp_project_\&_document_manager 4.71 | premières → 4.71 | Pas de correctif indiqué |
Autres CVE de SP Project & Document Manager
Les 5 CVE de SP Project & Document Manager →
CVE-2024-3749
The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in…
6.5
Moyenne
CVE-2022-1551
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad…
Non notée
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to…
Non notée
CVE-2021-24347
The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin…
Non notée