Smartypants vulnerabilities

Products

• Sp Project & Document Manager 16

Newest

• smartypants sp project & document manager SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function CVE-2026-10737 7.5 HighJune 4, 2026
• smartypants sp project & document manager WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability CVE-2024-31118 6.5 MediumFebruary 17, 2026
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability CVE-2024-37224 7.5 HighJuly 9, 2024
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR CVE-2024-3749 6.5 MediumMay 15, 2024
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager <= 4.71 - Data Update via IDOR CVE-2024-3748 6.5 MediumMay 15, 2024
• smartypants sp project & document manager SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update CVE-2024-1693 4.3 MediumMay 9, 2024
• smartypants sp project & document manager WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability CVE-2024-33923 6.3 MediumMay 3, 2024
• smartypants sp project & document manager WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability CVE-2024-32551 7.6 HighApril 18, 2024
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection CVE-2024-24868 8.5 HighFebruary 28, 2024
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection CVE-2023-36677 8.3 HighNovember 3, 2023
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS) CVE-2023-36530 5.9 MediumAugust 10, 2023
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change CVE-2023-3063 8.8 HighJune 30, 2023
• smartypants sp project & document manager (wordpress plugin), smartypantsplugins sp project \& document manager +1 more WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability CVE-2022-34857 6.1 MediumAugust 22, 2022
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager < 4.58 - Sensitive File Disclosure CVE-2022-1551 6.5 MediumJuly 25, 2022
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload CVE-2021-4225 8.8 HighApril 25, 2022
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting CVE-2021-38315 6.1 MediumAugust 16, 2021
• smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 more SP Project & Document Manager <2 4.22 - Authenticated Shell Upload CVE-2021-24347 Public exploit EPSS 54.1% 8.8 HighJune 14, 2021