| CVE-2024-37224 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project &…
|
7.5
Élevée
|
9 juil. 2024 |
| CVE-2024-3749 |
The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in…
|
6.5
Moyenne
|
15 mai 2024 |
| CVE-2024-3748 |
The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a…
|
6.5
Moyenne
|
15 mai 2024 |
| CVE-2023-36677 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP…
|
8.3
Élevée
|
3 nov. 2023 |