Security Advisory

CVE-2024-3749

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-15 06:00:04
Last updated 2024-08-01 20:20:01
Assigner WPScan
State PUBLISHED

Description

The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user