NA

CVE-2024-3749

Published: 15/05/2024 Updated: 15/05/2024

Vulnerability Summary

The SP Project & Document Manager WordPress plugin up to and including 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user