Skip to content

Known vulnerabilities in SmartyPants SP Project & Document Manager

Is your version affected?

CVE Summary Score Published
CVE-2026-10737 The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing… 7.5 High Jun 4, 2026
CVE-2024-31118 Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly… 6.5 Medium Feb 17, 2026
CVE-2024-37224 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &… 7.5 High Jul 9, 2024
CVE-2024-1693 The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a… 4.3 Medium May 9, 2024
CVE-2024-33923 Missing Authorization vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project &… 6.3 Medium May 3, 2024
CVE-2024-32551 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP… 7.6 High Apr 18, 2024
CVE-2024-24868 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP… 8.5 High Feb 28, 2024
CVE-2023-36677 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP… 8.3 High Nov 3, 2023
CVE-2023-36530 Auth 5.9 Medium Aug 10, 2023
CVE-2023-3063 The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up… 8.8 High Jun 30, 2023
CVE-2021-38315 The SP Project & Document Manager WordPress plugin is vulnerable to attribute-based Reflected Cross-Site Scripting via… 6.1 Medium Aug 16, 2021

Other SmartyPants products