title: SP Project & Document Manager < 4.58 - Sensitive File Disclosure
description: The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.
problem types: CWE-425 Direct Request ('Forced Browsing')
affected:
{
vendor: Unknown
product: SP Project & Document Manager
versions:
status: affected, versionType: custom, version: 0, lessThan: 4.58
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}