cve/2024/CVE-2024-3749.md
2024-05-25 21:48:12 +02:00

777 B

CVE-2024-3749

Description

The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user

POC

Reference

Github