WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
sp-blog-designer
Published
2025-03-31
Title
SP Blog Designer <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
sp-client-document-manager
Published
2014-12-02
Title
SP Client Document Manager < 2.4.4 - Multiple SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project & Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2015-03-31
Title
SP Project Document Manager <= 2.5.3 - Blind SQL Injection
Slug
sp-client-document-manager
Published
2016-03-07
Title
SP Projects & Document Manager < 2.6.0.0 - Multiple Vulnerabilities
Slug
sp-client-document-manager
Published
2021-05-25
Title
SP Project & Document Manager < 4.22 - Authenticated Shell Upload
Slug
sp-client-document-manager
Published
2021-08-16
Title
SP Project & Document Manager < 4.26 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2021-06-28
Title
SP Project & Document Manager < 4.24 - Subscriber+ Shell Upload
Slug
sp-client-document-manager
Published
2022-06-28
Title
SP Project & Document Manager < 4.58 - Sensitive File Disclosure
Slug
sp-client-document-manager
Published
2022-08-10
Title
SP Project & Document Manager < 4.62 - Reflected Cross-Site Scripting
Slug
sp-client-document-manager
Published
2023-06-29
Title
SP Project & Document Manager < 4.68 - Subscriber+ Insecure Direct Object References
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Admin+ Stored XSS
Slug
sp-client-document-manager
Published
2023-06-30
Title
SP Project & Document Manager < 4.68 - Subscriber+ SQLi
Slug
sp-client-document-manager
Published
2024-02-02
Title
SP Project & Document Manager < 4.70 - Authenticated (Contributor+) SQL Injection via Shortcode
Slug
sp-client-document-manager
Published
2024-03-29
Title
SP Project & Document Manager <= 4.70 - Missing Authorization Stored Cross-Site Scripting
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Subscriber+ File Download via IDOR
Slug
sp-client-document-manager
Published
2024-04-24
Title
SP Project & Document Manager <= 4.71 - Data Update via IDOR
Slug
sp-client-document-manager
Published
2024-04-16
Title
SP Project & Document Manager <= 4.71 - Authenticated (Author+) SQL Injeciton
Slug
sp-client-document-manager
Published
2024-05-07
Title
SP Project & Document Manager <= 4.70 - Authenticated (Subscriber+) Arbitrary Folder Name Update
Slug
sp-client-document-manager
Published
2024-04-29
Title
SP Project & Document Manager <= 4.69 - Missing Authorization
Slug
sp-client-document-manager
Published
2024-06-21
Title
SP Project & Document Manager <= 4.71 - Authenticated (Subscriber+) Directory Traversal
Slug
sp-news-and-widget
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sp-rental-manager
Published
2021-09-08
Title
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
Slug
spacer
Published
2022-10-28
Title
Spacer < 3.0.7 - Admin+ Stored XSS
Slug
spacer
Published
2025-01-06
Title
Spacer <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Limited Information Disclosure