CVE-2022-1551

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files...

PT-2022-13952 · WordPress · Sp Project & Document Manager

Name of the Vulnerable Software and Affected Versions: The SP Project & Document Manager WordPress plugin versions prior to 4.58 Description: The issue allows bad actors to access other users' sensitive files due to an easily guessable path used to store user files. Recommendations: For versions...

WordPress MalCare Security plugin <= 4.57 - Authenticated Cross-Site Scripting (XSS) vulnerability

Authenticated Cross-Site Scripting XSS vulnerability discovered by Lenon Leite in WordPress MalCare Security plugin versions = 4.57. Solution Update the WordPress MalCare Security plugin to the latest available version at least 4.58...

Pine < 4.58 Multiple Overflows

Binary data 1326.prm...