Lucene search

K
patchstackViktor Markopoulos (vict0ni)PATCHSTACK:39F49D3A4DFF9A6B3DD98005F1DA5541
HistoryMay 25, 2021 - 12:00 a.m.

WordPress SP Project & Document Manager plugin <= 4.21 - Authenticated Shell Upload vulnerability

2021-05-2500:00:00
Viktor Markopoulos (vict0ni)
patchstack.com
14
wordpress
sp project
document manager
shell upload
vulnerability
viktor markopoulos
update

EPSS

0.971

Percentile

99.8%

Authenticated Shell Upload discovered by Viktor Markopoulos (vict0ni) in WordPress SP Project & Document Manager plugin (versions <= 4.21).

Solution

           Update the WordPress SP Project & Document Manager plugin to the latest available version (at least 4.22).