SSmartyPants

Products

Exploited and recent CVEs

• CVE-2026-10737 High 7.5 SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function 0.4%
• CVE-2024-31118 Medium 6.5 WordPress SP Project & Document Manager plugin <= 4.70 - Broken Access Control to XSS vulnerability 0.2%
• CVE-2024-37224 High 7.5 WordPress SP Project & Document Manager plugin <= 4.71 - Directory Traversal vulnerability 0.6%
• CVE-2024-1693 Medium 4.3 SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update 0.4%
• CVE-2024-33923 Medium 6.3 WordPress SP Project & Document Manager plugin <= 4.69 - Broken Access Control vulnerability 0.4%
• CVE-2024-32551 High 7.6 WordPress SP Project & Document Manage plugin <= 4.71 - Auth. SQL Injection vulnerability 0.5%
• CVE-2024-24868 High 8.5 WordPress SP Project & Document Manager Plugin <= 4.69 is vulnerable to SQL Injection 0.5%
• CVE-2023-36677 High 8.3 WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection 0.7%
• CVE-2023-36530 Medium 5.9 WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS) 0.4%
• CVE-2023-3063 High 8.8 SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change 0.7%
• CVE-2022-34857 Medium 6.1 WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability 0.6%
• CVE-2021-38315 Medium 6.1 SP Project & Document Manager <= 4.25 Reflected Cross-Site Scripting 0.9%