SmartyPants vulnerabilities
12 published CVEs name SmartyPants among the affected products.
- 12Published CVEs12 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-10737
SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function
smartypants · SP Project & Document Manager
High7.5 - CVE-2024-31118
WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability
Smartypants · SP Project & Document Manager
Medium6.5 - CVE-2024-37224
WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability
smartypants · SP Project & Document Manager
High7.5 - CVE-2024-1693
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
smartypants · SP Project & Document Manager
Medium4.3 - CVE-2024-33923
WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability
Smartypants · SP Project & Document Manager
Medium6.3 - CVE-2024-32551
WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability
Smartypants · SP Project & Document Manager
High7.6 - CVE-2024-24868
WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection
Smartypants · SP Project & Document Manager
High8.5 - CVE-2023-36677
WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection
Smartypants · SP Project & Document Manager
High8.3 - CVE-2023-36530
WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)
Smartypants · SP Project & Document Manager
Medium5.9 - CVE-2023-3063
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
smartypants · SP Project & Document Manager
High8.8