Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: softpulseinfotech Clear all filters
TI-2026-04239 CVE-2026-4859 · GHSA-p424-c7qx-c8pc

SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute

Priority LOW 28

The SP Blog Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'design' attribute of the `wpsbd_post_carousel` shortcode in all versions up to, and including, 1.0.0 due to insufficient inp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00187 Published 2026-05-12 No fix listed CWE-79
TI-2024-35169 CVE-2024-52498 · GHSA-3g56-vx8v-f22v

WordPress SP Blog Designer plugin <= 1.0.0 - Local File Inclusion vulnerability

Priority LOW 36

Path Traversal: '.../...//' vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows PHP Local File Inclusion.This issue affects SP Blog Designer: from n/a through <= 1.0.0.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00637 Published 2024-11-28 No fix listed CWE-35
TI-2024-35051 CVE-2024-52380 · GHSA-854h-5j84-f829

WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 52

Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web Shell to a Web Server.This issue affects Picsmize: from n/a through <= 1.0.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0158 Published 2024-11-14 No fix listed CWE-434