Login Request a demo
SP
Product
SP Project & Document Manager
by smartypants · last CVE Jun 4, 2026
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 5Medium 6Low 0
Severity
All severities11Critical0High5Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add SP Project & Document Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-31118
6.5
0%
Feb 17
WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability
Affected: through 4.70
CVE-2024-37224
6.5
1%
Jul 9
WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability
Affected: through 4.71
CVE-2024-33923
6.3
0%
May 3
WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability
Affected: through 4.69
CVE-2021-38315
6.1
1%
Aug 16
SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting
Affected: 4.25 through 4.25
CVE-2023-36530
4.8
0%
Aug 10
WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)
Affected: through 4.67
CVE-2024-1693
4.3
0%
May 9
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Affected: through 4.70
Showing 6