CVE-2022-1551

SP Project & Document Manager < 4.58 - Sensitive File Disclosure

published July 25, 2022

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00983 · 61.9th percentile
Published
2022-07-25T12:46Z
EPSS history
Timeline
  • 25 JUL 12:46Z
    SP Project & Document Manager < 4.58 - Sensitive File Disclosure
    cvelistv5