SM
Vendor
smartypants
12
CVEs
0
On KEV
0
New 30D
Products
SP8.8
SP Project & Document Manager
smartypants
11 CVEs0 on KEV0 new
SP6.1
SP Project & Document Manager (WordPress plugin)
smartypants
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-10737 | SP SP Project & Document Manager smartypants | 7.5 | Jun 4 | SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function |
| CVE-2024-31118 | SP SP Project & Document Manager Smartypants | 6.5 | Feb 17 | WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability |
| CVE-2024-37224 | SP SP Project & Document Manager smartypants | 6.5 | Jul 9 | WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability |
| CVE-2024-1693 | SP SP Project & Document Manager smartypants | 4.3 | May 9 | SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update |
| CVE-2024-33923 | SP SP Project & Document Manager Smartypants | 6.3 | May 3 | WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability |
| CVE-2024-32551 | SP SP Project & Document Manager Smartypants | 7.6 | Apr 18 | WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability |
| CVE-2024-24868 | SP SP Project & Document Manager Smartypants | 8.8 | Feb 28 | WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection |
| CVE-2023-36677 | SP SP Project & Document Manager Smartypants | 8.8 | Nov 3 | WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection |
| CVE-2023-36530 | SP SP Project & Document Manager Smartypants | 4.8 | Aug 10 | WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-3063 | SP SP Project & Document Manager smartypants | 8.8 | Jun 30 | SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change |
| CVE-2022-34857 | SP SP Project & Document Manager (WordPress plugin) smartypants | 6.1 | Aug 22 | WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability |
| CVE-2021-38315 | SP SP Project & Document Manager SmartyPants | 6.1 | Aug 16 | SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting |