Skip to content
OpenAdvisories
High · 8.3 CVE-2023-36677 EUVD-2023-40620GHSA-82h7-5mqq-xr6g

WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: smartypants Product: SP Project & Document Manager

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager allows SQL Injection.This issue affects SP Project & Document Manager: from n/a through 4.67.

Affected products

VendorProductAffectedFixed
Smartypants SP Project & Document Manager ≤ 4.67 —

References