Login Request a demo
SP
Product
SP Project & Document Manager
by smartypants · last CVE Jun 4, 2026
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 5Medium 5Low 0
Severity
All severities10Critical0High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SP Project & Document Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-24868
8.8
1%
Feb 28
WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection
Affected: through 4.69
CVE-2023-36677
8.8
1%
Nov 3
WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection
Affected: through 4.67
CVE-2023-3063
8.8
1%
Jun 30
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Affected: through 4.67
CVE-2024-32551
7.6
0%
Apr 18
WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability
Affected: through 4.71
CVE-2026-10737
7.5
0%
Jun 4
SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function
Affected: through 4.71
CVE-2024-31118
6.5
0%
Feb 17
WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability
Affected: through 4.70
CVE-2024-37224
6.5
1%
Jul 9
WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability
Affected: through 4.71
CVE-2024-33923
6.3
0%
May 3
WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability
Affected: through 4.69
CVE-2023-36530
4.8
0%
Aug 10
WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)
Affected: through 4.67
CVE-2024-1693
4.3
0%
May 9
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Affected: through 4.70
Showing 10