Smartypants

12 CVEs across 2 Smartypants products. Browse Smartypants vulnerabilities, severities, and proof-of-concept exploits.

Smartypants products with known CVEs

ProductCVEs
Sp Project & Document Manager11
Sp Project & Document Manager (WordPress Plugin)1
Smartypants CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-10737High7.52026-06-04The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the view_file function in all…
CVE-2024-31118Medium6.52026-02-17Missing Authorization vulnerability in Smartypants SP Project & Document Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
CVE-2024-37224High7.52024-07-09Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project & Document Manager.This issue affects SP…
CVE-2024-1693Medium4.32024-05-14The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cdm_save_cat…
CVE-2024-33923Medium6.32024-05-03Missing Authorization vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager : from n/a through 4.69.
CVE-2024-32551High7.62024-04-18Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affe…
CVE-2024-24868High8.52024-02-28Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affe…
CVE-2023-36677High8.32023-11-03Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager allows SQL Inje…
CVE-2023-36530Medium5.92023-08-10Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <= 4.67 versions.
CVE-2023-3063High8.82023-06-30The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.67. This is due t…
CVE-2022-34857Medium6.12022-08-22Reflected Cross-Site Scripting (XSS) vulnerability in smartypants SP Project & Document Manager plugin <= 4.59 at WordPress
CVE-2021-38315Medium6.12021-08-16The SP Project & Document Manager WordPress plugin is vulnerable to attribute-based Reflected Cross-Site Scripting via the from and to parameters in the ~/func…