CVE-2024-3749

Publication date

2024-05-15 06:00:04

Family

WPScan

State

PUBLISHED

Description

The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user