6.5
Medium
CVE-2024-31118 Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SP Project & Document Manager: from n/a through 4.70.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SP Project & Document Manager 4.70 | earliest → 4.70 | No fix stated |
Other CVEs of SP Project & Document Manager
The 11 CVEs of SP Project & Document Manager →
CVE-2026-10737
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing…
7.5
High
CVE-2024-37224
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &…
7.5
High
CVE-2024-1693
The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a…
4.3
Medium
CVE-2024-33923
Missing Authorization vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project &…
6.3
Medium