CVE-2022-1551

6.5 mediumEPSS 1.0%

Medium (6.5) in smartypantsplugins sp project \& document manager. EPSS 1.0% chance of exploitation in the next 30 days.

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2022-07-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

smartypantsplugins:sp_project_\&_document_manager

References

https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84
https://wpscan.com/vulnerability/51b4752a-7922-444d-a022-f1c7159b5d84

Check your stack JSON