← Database

CVE-2022-1551

MEDIUM CVSS: 6.5 Published: 2022-07-25 Modified: 2026-06-17

Description

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

Affected Platforms

Smartypantsplugins Sp Project \& Document Manager

Weakness Type

CWE-425

References