| CVE-2024-37224 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &…
|
7.5
High
|
Jul 9, 2024 |
| CVE-2024-3749 |
The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in…
|
6.5
Medium
|
May 15, 2024 |
| CVE-2024-3748 |
The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a…
|
6.5
Medium
|
May 15, 2024 |
| CVE-2023-36677 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP…
|
8.3
High
|
Nov 3, 2023 |