Skip to contentSmartypants Sp Project & Document Manager vulnerabilities
- smartypants sp project & document managerSP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() FunctionCVE-2026-107377.5 High
- smartypants sp project & document managerWordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerabilityCVE-2024-311186.5 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerabilityCVE-2024-372247.5 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDORCVE-2024-37496.5 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <= 4.71 - Data Update via IDORCVE-2024-37486.5 Medium
- smartypants sp project & document managerSP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name UpdateCVE-2024-16934.3 Medium
- smartypants sp project & document managerWordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerabilityCVE-2024-339236.3 Medium
- smartypants sp project & document managerWordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerabilityCVE-2024-325517.6 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL InjectionCVE-2024-248688.5 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL InjectionCVE-2023-366778.3 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)CVE-2023-365305.9 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password ChangeCVE-2023-30638.8 High
- smartypants sp project & document manager (wordpress plugin), smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2022-348576.1 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager < 4.58 - Sensitive File DisclosureCVE-2022-15516.5 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager < 4.24 - Subscriber+ Shell UploadCVE-2021-42258.8 High
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <= 4.25 Reflected Cross-Site ScriptingCVE-2021-383156.1 Medium
- smartypants sp project & document manager, smartypantsplugins sp project \& document manager +1 moreSP Project & Document Manager <2 4.22 - Authenticated Shell UploadCVE-2021-24347Public exploitEPSS 54.1%8.8 High