{"id":"CVE-2021-24347","aliases":["EUVD-2021-11260","GHSA-p8xc-86cg-8cgm"],"status":"published","title":"SP Project \u0026 Document Manager \u003c2 4.22 - Authenticated Shell Upload","description":"The SP Project \u0026 Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from \"php\" to \"pHP\".","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.5408,"percentile":0.9902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-178","CWE-94"],"published":"2021-06-14T13:37:12Z","modified":"2026-06-17T03:39:52Z","exploits":[{"source":"metasploit","id":"exploit/multi/http/wp_plugin_sp_project_document_rce","title":"Wordpress Plugin SP Project and Document - Authenticated Remote Code Execution","type":"exploit","platform":"PHP","date":"2021-06-14","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/wp_plugin_sp_project_document_rce"},{"source":"nuclei","id":"CVE-2021-24347","title":"WordPress SP Project \u0026 Document Manager \u003c4.22 - Authenticated Shell Upload","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24347.yaml"}],"products":[{"vendor":"smartypants","product":"sp project \u0026 document manager"},{"vendor":"smartypantsplugins","product":"sp_project_\\\u0026_document_manager"},{"vendor":"unknown","product":"sp project \u0026 document manager"}],"references":[{"url":"https://wpscan.com/vulnerability/8f6e82d5-c0e9-468e-acb8-7cd549f6a45a","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/163434/WordPress-SP-Project-And-Document-Manager-4.21-Shell-Upload.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/163675/WordPress-SP-Project-And-Document-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-24347"},{"url":"https://github.com/advisories/GHSA-p8xc-86cg-8cgm"}],"sources":{"cve":[{"id":"CVE-2021-24347","title":"SP Project \u0026 Document Manager \u003c2 4.22 - Authenticated Shell Upload","description":"The SP Project \u0026 Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from \"php\" to \"pHP\".","status":"published","published":"2021-06-14T13:37:12Z","modified":"2024-08-03T19:28:23.833Z","cwes":["CWE-178"],"updated_at":"2026-11-02T14:33:05.331617Z"}],"euvd":[{"id":"EUVD-2021-11260","description":"The SP Project \u0026 Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from \"php\" to \"pHP\".","status":"published","published":"2021-06-14T13:37:12Z","modified":"2024-08-03T19:28:23Z","updated_at":"2026-11-03T03:24:57.947294Z"}],"ghsa":[{"id":"GHSA-p8xc-86cg-8cgm","title":"The SP Project \u0026 Document Manager WordPress plugin before 4.22 allows users to upload files,...","description":"The SP Project \u0026 Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from \"php\" to \"pHP\".","status":"published","published":"2022-05-24T19:05:18Z","modified":"2023-01-27T05:03:20Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94","CWE-178"],"updated_at":"2026-11-02T14:42:13.302487Z"}],"nvd":[{"id":"CVE-2021-24347","description":"The SP Project \u0026 Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be uploaded by changing the file extension's case, for example, from \"php\" to \"pHP\".","status":"published","published":"2021-06-14T14:15:08.2Z","modified":"2026-06-17T03:39:52.387Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-178"],"updated_at":"2026-11-02T14:06:54.892562Z"}]}}