The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files belonging to another user
Name | Vendor | Start Version | End Version |
---|---|---|---|
Sp_project_&_document_manager | Smartypantsplugins | * | 4.71 (excluding) |