SmartyPants vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20233
4. 20245
5. 20262

Newest CVEs

• CVE-2026-10737

  SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function

  smartypants · SP Project & Document Manager

  High7.5
• CVE-2024-31118

  WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability

  Smartypants · SP Project & Document Manager

  Medium6.5
• CVE-2024-37224

  WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability

  smartypants · SP Project & Document Manager

  High7.5
• CVE-2024-1693

  SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update

  smartypants · SP Project & Document Manager

  Medium4.3
• CVE-2024-33923

  WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability

  Smartypants · SP Project & Document Manager

  Medium6.3
• CVE-2024-32551

  WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability

  Smartypants · SP Project & Document Manager

  High7.6
• CVE-2024-24868

  WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection

  Smartypants · SP Project & Document Manager

  High8.5
• CVE-2023-36677

  WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection

  Smartypants · SP Project & Document Manager

  High8.3
• CVE-2023-36530

  WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)

  Smartypants · SP Project & Document Manager

  Medium5.9
• CVE-2023-3063

  SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

  smartypants · SP Project & Document Manager

  High8.8