CVE-2022-1551 — SP Project & Document Manager < 4.58 - Sensitive File Disclosure
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
Published: 2022-07-25 · CVSS: Unscored
The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7