WordPress Plugin Vulnerabilities

SP Project Document Manager <= 2.5.3 - Blind SQL Injection

Description

The SP Project & Document Manager WordPress plugin was affected by a Blind SQL Injection security vulnerability.

Affects Plugins

Plugin icon
sp-client-document-manager
Fixed in 2.5.4

References

Exploitdb
36576

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
38d5a769-fec9-4ed7-b887-70cb985c8d68

Timeline

Publicly Published
2015-03-31 (about 11 years ago)
Added
2015-04-21 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2025-07-01
Title
Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated SQL Injection via oid
Published
2025-09-05
Title
WP Full Stripe Free < 8.2.6 - Authenticated (Administrator+) SQL Injection
Published
2025-06-30
Title
LMS < 9.3 - Unauthenticated SQL Injection
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'coating_text'
Published
2025-03-14
Title
School Management System – WPSchoolPress < 2.2.17 - Parent+ SQL Injection