SM
Vendor
Smartypantsplugins
15
CVEs
0
On KEV
0
New 30D
Products
SP8.8
SP Project & Document Manager
Smartypantsplugins
13 CVEs0 on KEV0 new
SR7.5
SP Rental Manager
Smartypantsplugins
1 CVEs0 on KEV0 new
WP–
Wp-funeral-press
Smartypantsplugins
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-37224 | SP SP Project & Document Manager Smartypantsplugins | 6.5 | Jul 9 | WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability |
| CVE-2024-3749 | SP SP Project & Document Manager Smartypantsplugins | 6.5 | May 15 | SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR |
| CVE-2024-3748 | SP SP Project & Document Manager Smartypantsplugins | 6.5 | May 15 | SP Project & Document Manager <= 4.71 - Data Update via IDOR |
| CVE-2024-24868 | SP SP Project & Document Manager Smartypantsplugins | 8.8 | Feb 28 | WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection |
| CVE-2023-36677 | SP SP Project & Document Manager Smartypantsplugins | 8.8 | Nov 3 | WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection |
| CVE-2023-36530 | SP SP Project & Document Manager Smartypantsplugins | 4.8 | Aug 10 | WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-3063 | SP SP Project & Document Manager Smartypantsplugins | 8.8 | Jun 30 | SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change |
| CVE-2022-34857 | SP SP Project & Document Manager Smartypantsplugins | 6.1 | Aug 22 | WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability |
| CVE-2022-1551 | SP SP Project & Document Manager Smartypantsplugins | 6.5 | Jul 25 | SP Project & Document Manager < 4.58 - Sensitive File Disclosure |
| CVE-2021-4225 | SP SP Project & Document Manager Smartypantsplugins | 8.8 | Apr 25 | SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload |
| CVE-2021-38324 | SR SP Rental Manager Smartypantsplugins | 7.5 | Sep 9 | SP Rental Manager <= 1.5.3 Unauthenticated SQL Injection |
| CVE-2021-38315 | SP SP Project & Document Manager Smartypantsplugins | 6.1 | Aug 16 | SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting |
| CVE-2021-24347 | SP SP Project & Document Manager Smartypantsplugins | 8.8 | Jun 14 | SP Project & Document Manager <2 4.22 - Authenticated Shell Upload |
| CVE-2014-9178 | SP SP Project & Document Manager Smartypantsplugins | – | Dec 2 | Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-document-manager) 2.4.1 and earlier for… |
| CVE-2013-3529 | WP Wp-funeral-press Smartypantsplugins | – | May 10 | Multiple cross-site scripting (XSS) vulnerabilities in user/obits.php in the WP FuneralPress plugin before 1.1.7 for WordPress allow remote attackers to inject arbitrary web… |