Softpulseinfotech

4 CVEs in 2 Softpulseinfotech products, including Sp Blog Designer, Picsmize. Newest: CVE-2026-4859 (2026-05-12).

Softpulseinfotech products with known CVEs

ProductCVEs
Sp Blog Designer3
Picsmize1
Softpulseinfotech CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4859Medium6.42026-05-12The SP Blog Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'design' attribute of the `wpsbd_post_carousel` shortcode in all…
CVE-2025-31606Medium4.82025-03-31Missing Authorization vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows Exploiting Incorrectly Configured Access Control Security Lev…
CVE-2024-52498High7.52024-11-28Path Traversal: '.../...//' vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows PHP Local File Inclusion.This issue affects SP Blog Des…
CVE-2024-52380Critical10.02024-11-14Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web Shell to a Web Server.This issue affec…