CVE-2024-52380

🗓️ 14 Nov 2024 17:39:41Reported by PatchstackType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Unrestricted file upload vulnerability in Softpulse Infotech Picsmiz

Reporter	Title	Published	Views	Family All 13
GithubExploit	Exploit for CVE-2024-52380	18 Jan 202504:10	–	githubexploit
GithubExploit	Exploit for CVE-2024-52380	30 Nov 202402:43	–	githubexploit
GithubExploit	Exploit for CVE-2024-52380	25 Nov 202414:56	–	githubexploit
Circl	CVE-2024-52380	14 Nov 202420:00	–	circl
CNNVD	WordPress plugin Picsmize 代码问题漏洞	14 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-52380 WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability	14 Nov 202417:39	–	cvelist
NVD	CVE-2024-52380	14 Nov 202418:15	–	nvd
Patchstack	WordPress Picsmize Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload	11 Nov 202400:00	–	patchstack
Patchstack	WordPress Picsmize plugin <= 1.0.0 - Arbitrary File Upload vulnerability	11 Nov 202408:58	–	patchstack
Positive Technologies	PT-2024-35218 · Picsmize · Picsmize	14 Nov 202400:00	–	ptsecurity

Vulners

Vulnrichment

Node

softpulseinfotech picsmizeRange≤1.0.0wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "picsmize",
    "product": "Picsmize",
    "vendor": "softpulseinfotech",
    "versions": [
      {
        "lessThanOrEqual": "1.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/picsmize/vulnerability/wordpress-picsmize-plugin-1-0-0-arbitrary-file-upload-vulnerability

Parameter	Position	Path	Description	CWE
images[]	request body	/wp-admin/admin-ajax.php	Unauthenticated arbitrary file upload via PicsUploadManualFile in Picsmize plugin	CWE-434
action	request body	/wp-admin/admin-ajax.php	Unauthenticated arbitrary file upload via PicsUploadManualFile in Picsmize plugin	CWE-434

28 Apr 2026 16:10Current

7.2High risk

Vulners AI Score7.2

CVSS 3.110

EPSS0.60352

SSVC

CWE-434