Skip to content
Ssoftpulseinfotech
Exploited and recent CVEs
-
CVE-2026-4859
Medium 6.4
SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute
0.2%
-
CVE-2025-31606
Medium 4.8
WordPress SP Blog Designer plugin <= 1.0.0 - Arbitrary Shortcode Execution vulnerability
0.2%
-
CVE-2024-52498
High 7.5
WordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability
0.6%
-
CVE-2024-52380
Critical 10.0
WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability
1.6%