softpulseinfotech

Products

ProductCVEsExploitedLatest
SP Blog Designer3–May 12, 2026
Picsmize1–Nov 14, 2024

Exploited and recent CVEs

  • CVE-2026-4859 Medium 6.4 SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute 0.2%
  • CVE-2025-31606 Medium 4.8 WordPress SP Blog Designer plugin <= 1.0.0 - Arbitrary Shortcode Execution vulnerability 0.2%
  • CVE-2024-52498 High 7.5 WordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-52380 Critical 10.0 WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability 1.6%