Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in SP Project & Document Manager 2.5.9.5

  • Severity: high-risk
  • Status: Open
  • Publication: February 2, 2016

The SP Project & Document Manager plugin for WordPress is not secure in versions up to 2.5.9.5. Hackers can perform certain actions, such as changing the settings of the plugin, without needing to be authenticated (logged in). They can do this by tricking a site administrator into clicking a malicious link. It is important to make sure you have the latest version of the plugin installed to protect yourself from this vulnerability.

Detected in:

SP Project & Document Manager open vulnerable versions: >= * <= 2.5.9.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.