Description
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SP Project & Document Manager | < 4.58 | 4.58 |
References
- https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84 exploit vdb-entry technical-description