CVE-2022-1551

published 2022-07-25

CVE-2022-1551: The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other…

Priority P3 35 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
smartypantsplugins	sp_project_document_manager	< 4.58	4.58

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-425 CWE-200