CVE-2024-31118

CVE-2024-31118 affects the WordPress plugin SP Project & Document Manager (versions up to 4.70). The issue is a Missing Authorization vulnerability caused by incorrectly configured access control security levels, potentially enabling unauthorized access to project/document resources. Public sourc...

WordPress SP Project & Document Manager Plugin <= 4.70 is vulnerable to Broken Access Control

Software SP Project & Document Manager Type Plugin Vulnerable versions = 4.70 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31118 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID d4072053f9aa Credits CatFather...