Upgrade the plugin.
Catsecurity discovered and reported this SQL Injection vulnerability in WordPress SP Project & Document Manager Plugin. This could allow a malicious actor to directly interact with your database, including but not limited to stealing information and creating new administrator accounts. This vulnerability has been fixed in version 2.5.4.
Reflected CrossSite Scripting (XSS) vulnerability
6.1
10.08.2022
Sensitive File Disclosure vulnerability
5.3
29.06.2022
Attributebased Reflected CrossSite Scripting (XSS) vulnerability
6.1
16.08.2021
Authenticated Shell Upload vulnerability
8.8
25.05.2021
Multiple Vulnerabilities
07.03.2016
Successfully submit vulnerabilities and receive an invite to our Alliance platform.
Learn more
Close
SP Project & Document Manager
LinkedIn
Facebook
Twitter
Join Discord
