PatchTheCVE: smartypantspluginshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-37224: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SPhttps://patchthecve.com/cve/CVE-2024-37224.htmlhttps://patchthecve.com/cve/CVE-2024-37224.htmlWed, 17 Jun 2026 07:37:57 +0000HIGH 7.5: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager: from n/a through 4.71.CVE-2024-24868: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypahttps://patchthecve.com/cve/CVE-2024-24868.htmlhttps://patchthecve.com/cve/CVE-2024-24868.htmlWed, 17 Jun 2026 07:15:08 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager.This issue affects SP Project & Document Manager: from n/a through 4.69.CVE-2023-36677: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypahttps://patchthecve.com/cve/CVE-2023-36677.htmlhttps://patchthecve.com/cve/CVE-2023-36677.htmlWed, 17 Jun 2026 06:06:49 +0000HIGH 8.3: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Project & Document Manager allows SQL Injection.This issue affects SP Project & Document Manager: from n/a through 4.67.CVE-2023-36530: Authhttps://patchthecve.com/cve/CVE-2023-36530.htmlhttps://patchthecve.com/cve/CVE-2023-36530.htmlWed, 17 Jun 2026 06:06:28 +0000MEDIUM 5.9: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <= 4.67 versions.