| Package | Affected versions | Patched versions |
|---|---|---|
| sp project & document manager | ≤ 4.71 |
The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a user to manipulate the `user_id` to make it appear that a file was uploaded by another user
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free