Extension WordPress
Vulnérabilités SP Project & Document Manager, page 2
Cette page rassemble les failles publiées pour SP Project & Document Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de SP Project & Document Manager
24 fiches
SP Projects & Document Manager <= 2.5.9.5 – SQL Injection
The SP Projects & Document Manager plugin for WordPress is vulnerable to generic SQL Injection in versions up to, and including, 2.5.9.5 due to insufficient escaping on several user-supplied parameters and lack of sufficient preparation on existing SQL…
*-2.5.9.5
2.6.6.0
07/03/2016
SP Projects & Document Manager <= 2.6.0.0 – Arbitrary File Upload
The SP Projects & Document Manager plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 2.6.0.0 due to insufficient file type validation on the cdm_upload_file() function. This makes it possible for attackers…
*-2.6.1.3
2.6.1.4
07/03/2016
SP Project & Document Manager <= 2.5.9.5 – Cross-Site Request Forgery
The SP Project & Document Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.9.5. This is due to missing nonce validation on various functions. This makes it possible for unauthenticated…
*-2.5.9.5
2.6.0.0
02/02/2016
SP Project & Document Manager < 2.4.4 – Multiple SQL Injection
Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-document-manager) 2.4.1 and earlier for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) vendor_email[] parameter in the…
[*, 2.4.4)
2.4.4
20/11/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.