MINI-WG8P-RW9Q-6JJ2

Bulletin has no description...

MINI-C72M-CCG8-4Q5P

Bulletin has no description...

MINI-XGPJ-C4F6-5QCC

Bulletin has no description...

MINI-RW7Q-GMX5-3GCX

Bulletin has no description...

MINI-87PW-F7C2-QGJG

Bulletin has no description...

MINI-3J89-RWX6-3W74

Bulletin has no description...

MINI-3FXX-H57F-PWHQ

Bulletin has no description...

MINI-4477-934Q-RF24

Bulletin has no description...

MINI-H89H-8XMH-JWPP

Bulletin has no description...

MINI-8WVX-RVJG-9QXV

Bulletin has no description...

MINI-F8M9-9FXW-66JR

Bulletin has no description...

MINI-495G-8688-HXJP

Bulletin has no description...

MINI-5274-2Q96-MV47

Bulletin has no description...

MINI-XCM9-PXRR-3QQ6

Bulletin has no description...

WordPress SP Project & Document Manager plugin <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure vulnerability

Missing Authorization to Unauthenticated Arbitrary File Information Disclosure vulnerability discovered by Namdn - Vncsglobal in WordPress Plugin SP Project & Document Manager versions = 4.71...

CGA-MF9G-2RQJ-5768

Bulletin has no description...

MINI-HMXX-P9XC-4Q59

Bulletin has no description...

CVE-2026-10737 SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the viewfile function in all versions up to, and including, 4.71. This makes it possible for unauthenticated attackers to read file metadata and obtain download links f...

CVE-2026-10737 SP Project & Document Manager <= 4.71 - Missing Authorization to Unauthenticated Arbitrary File Information Disclosure via view_file() Function

The SP Project & Document Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the viewfile function in all versions up to, and including, 4.71. This makes it possible for unauthenticated attackers to read file metadata and obtain download links f...

CVE-2026-10737

The SP Project & Document Manager plugin for WordPress is affected up to version 4.71 by an access control flaw in view_file that allows unauthenticated attackers to read file metadata and obtain download links for files stored in project folders. The authorization gate uses a negated nonce check...