cve/2022/CVE-2022-1551.md

### [CVE-2022-1551](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1551)
![](https://img.shields.io/static/v1?label=Product&message=SP%20Project%20%26%20Document%20Manager&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%204.58%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-425%20Direct%20Request%20('Forced%20Browsing')&color=brighgreen)

### Description

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

### POC

#### Reference
- https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84

#### Github
No PoCs found on GitHub currently.