WordPress SP Project & Document Manager Plugin <= 4.71 is vulnerable to SQL Injection

Low priority No impactful threat
<= 4.71Vulnerable version(s)
No official fix availableFixed version
16 Apr, 2024 by Patchstack

Get the fastest vulnerability mitigation with Patchstack!

Get started

Risks

CVSS 7.6

7.6

SQL Injection

This could allow a malicious actor to directly interact with your database, including but not limited to stealing information.

CVSS score is a way to evaluate and rank reported vulnerabilities in a standardized and repeatable way but which is not ideal for WordPress.

Solutions

This security issue has a low severity impact and is unlikely to be exploited.

Details

Have additional information or questions about this entry? Let us know.

Timeline

Reported byProfile ImageCatFather

16 Feb, 2024

Weekly WordPress security intelligence delivered to your inbox.