CVE-2022-1551: Smartypantsplugins SP Project & Document Manager

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

Affected products

• Smartypantsplugins SP Project & Document Manager: before 4.58 (fixed in 4.58)

Published 2022-07-25. Last modified 2026-06-17.