WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sp-announcement
Published
2024-07-10
Title
WP Announcement < 2.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
sp-blog-designer
Published
2024-11-20
Title
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Local File Inclusion
Slug
sp-blog-designer
Published
2025-03-31
Title
SP Blog Designer <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
sp-blog-designer
Published
2026-05-11
Title
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute
Slug
sp-client-document-manager
Published
2014-12-02
Title
SP Client Document Manager < 2.4.4 - Multiple SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project & Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2016-03-07
Title
SP Projects & Document Manager < 2.6.0.0 - Multiple Vulnerabilities
Slug
sp-client-document-manager
Published
2021-05-25
Title
SP Project & Document Manager < 4.22 - Authenticated Shell Upload
Slug
sp-client-document-manager
Published
2021-08-16
Title
SP Project & Document Manager < 4.26 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2021-06-28
Title
SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload
Slug
sp-client-document-manager
Published
2022-06-28
Title
SP Project & Document Manager < 4.58 - Sensitive File Disclosure
Slug
sp-client-document-manager
Published
2022-08-10
Title
SP Project & Document Manager < 4.62 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2023-06-29
Title
SP Project & Document Manager < 4.68 - Subscriber+ Insecure Direct Object References
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Admin+ Stored XSS
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Subscriber+ SQLi
Slug
sp-client-document-manager
Published
2024-02-02
Title
SP Project & Document Manager < 4.70 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
sp-client-document-manager
Published
2024-03-29
Title
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Data Update via IDOR
Slug
sp-client-document-manager
Published
2024-04-16
Title
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
Slug
sp-client-document-manager
Published
2024-05-07
Title
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Slug
sp-client-document-manager
Published
2024-04-29
Title
SP Project & Document Manager <= 4.69 - Missing Authorization
Slug
sp-client-document-manager
Published
2024-06-21
Title
SP Project & Document Manager <= 4.71 - Authenticated (Subscriber+) Directory Traversal
Slug
sp-client-document-manager
Published
2026-06-03
Title
SP Project & Document Manager <= 4.71 - Unauthenticated Arbitrary File Information Disclosure via view_file() Function