Sp Project Document Manager (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-05-15. Vendor: Unknown.

CVEs of Sp Project Document Manager

• CVE-2024-3749 - CVSS 6.5 (medium), 2024-05-15: The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in user to view and download files…
• CVE-2024-3748 - CVSS 6.5 (medium), 2024-05-15: The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a user to manipulate the `user_id` to…
• CVE-2022-1551 - CVSS 6.5 (medium), 2022-07-25: The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other…
• CVE-2021-4225 - CVSS 8.8 (high), 2022-04-25: The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to…
• CVE-2021-24347 - CVSS 8.8 (high), 2021-06-14: The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar…