Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-3749

SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown SP Project & Document Manager

Default version status: affected

  • 0 to ≤ 4.71affected

References