smartypantsplugins sp project & document manager

Name: smartypantsplugins sp project & document manager
Brand: smartypantsplugins

productUS

cpe:2.3:a:smartypantsplugins:sp_project_\&_document_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high5medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-24347US	high8.8	54.1% (99th)	Exploit	4.22	2021-06-14	< 4.22
CVE-2014-9178US	high7.5	4.63% (92nd)	Exploit	no fix	2014-12-02	≤ 2.4.1
CVE-2021-4225US	high8.8	1.72% (77th)	—	4.24	2022-04-25	< 4.24
CVE-2022-1551US	medium6.5	0.98% (62nd)	—	4.58	2022-07-25	< 4.58
CVE-2021-38315US	medium6.1	0.94% (61st)	—	no fix	2021-08-16	≤ 4.25
CVE-2023-3063US	—	0.73% (54th)	—	no fix	2023-06-30	≤ 4.67
CVE-2023-36677US	high8.8	0.72% (54th)	—	no fix	2023-11-03	≤ 4.67
CVE-2022-34857US	medium6.1	0.63% (50th)	—	4.62	2022-08-22	< 4.62
CVE-2024-37224US	medium6.5	0.57% (47th)	—	no fix	2024-07-09	≤ 4.71
CVE-2024-24868US	high8.8	0.54% (46th)	—	4.70	2024-02-28	< 4.70
CVE-2024-3749US	—	0.52% (44th)	—	4.71	2024-05-15	< 4.71
CVE-2024-3748US	—OT elevated	0.43% (38th)	—	no fix	2024-05-15	≤ 4.71
CVE-2023-36530US	medium4.8	0.37% (31st)	—	no fix	2023-08-10	≤ 4.67

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-178Improper Handling of Case Sensitivity1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-425Direct Request ('Forced Browsing')1 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.