What’s Vulnerable › Products
Smartypants SP Project & Document Manager vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your Smartypants SP Project & Document Manager version is affected
Latest Smartypants SP Project & Document Manager vulnerabilities
- CVE-2026-10737 — SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function (CVSS 7.5)
- CVE-2024-31118 — WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability (CVSS 6.5)
- CVE-2024-37224 — WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability (CVSS 6.5)
- CVE-2024-3749 — SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR (CVSS 6.5)
- CVE-2024-3748 — SP Project & Document Manager <= 4.71 - Data Update via IDOR (CVSS 6.5)
- CVE-2024-1693 — SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update (CVSS 4.3)
- CVE-2024-33923 — WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability (CVSS 6.3)
- CVE-2024-32551 — WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability (CVSS 7.6)
- CVE-2024-24868 — WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection (CVSS 8.8)
- CVE-2023-36677 — WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection (CVSS 8.8)
- CVE-2023-36530 — WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
- CVE-2023-3063 — SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change (CVSS 8.8)
- CVE-2022-34857 — WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2022-1551 — SP Project & Document Manager < 4.58 - Sensitive File Disclosure (CVSS 6.5)
- CVE-2021-4225 — SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload (CVSS 8.8)
- CVE-2021-38315 — SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-24347 — SP Project & Document Manager <2 4.22 - Authenticated Shell Upload (CVSS 8.8)
- CVE-2014-9178 — (CVSS 7.5)