Wpsoul vulnerabilities

Products

• Greenshift – Animation And Page Builder Blocks 20
• Greenshift 13

Newest

• wpsoul greenshift – animation and page builder blocks Greenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefix CVE-2026-119218 5.4 MediumNovember 7, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter CVE-2026-120520 5.3 MediumNovember 7, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText CVE-2026-107629 5.4 MediumOctober 29, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block CVE-2026-107627 5.4 MediumOctober 29, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder CVE-2026-93880 6.1 MediumOctober 2, 2026
• unknown greenshift Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute CVE-2026-83544 6.8 MediumSeptember 5, 2026
• unknown greenshift Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint CVE-2026-83543 4.1 MediumSeptember 5, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI CVE-2026-5092 6.4 MediumAugust 26, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings' CVE-2026-5093 4.3 MediumAugust 22, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute CVE-2026-4895 6.4 MediumApril 11, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' CVE-2026-2371 5.3 MediumMarch 6, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup CVE-2026-2589 5.3 MediumMarch 5, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2026-2593 6.4 MediumMarch 5, 2026
• wpsoul greenshift – animation and page builder blocks GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css CVE-2026-1927 5.4 MediumFebruary 5, 2026
• wpsoul greenshift – animation and page builder blocks Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes CVE-2025-11841 6.4 MediumNovember 4, 2025
• wpsoul greenshift WordPress Greenshift Plugin <= 12.1.1 - Broken Access Control Vulnerability CVE-2025-57884 4.3 MediumAugust 22, 2025
• wpsoul greenshift WordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-49301 6.5 MediumJune 6, 2025
• wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 more Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-3616 Public exploit 8.8 HighApril 22, 2025
• wpsoul greenshift WordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-30873 6.5 MediumMarch 27, 2025
• wpsoul greenshift, greenshiftwp greenshift - animation and page builder blocks +1 more WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-26884 6.5 MediumFebruary 25, 2025
• wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 more Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting CVE-2024-6155 6.4 MediumJanuary 9, 2025
• wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 more Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure CVE-2024-11181 4.3 MediumDecember 12, 2024
• wpsoul greencon WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-51926 6.5 MediumNovember 19, 2024
• wpsoul greenshift, greenshiftwp greenshift - animation and page builder blocks +1 more WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability CVE-2024-50419 5.4 MediumOctober 30, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• wpsoul greenshift WordPress Greenshift plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-44005 6.5 MediumSeptember 17, 2024
• wpsoul greenshift woocommerce addon WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability CVE-2024-43943 8.5 HighAugust 29, 2024
• wpsoul greenshift query and meta addon, greenshift query addon +1 more WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability CVE-2024-43942 8.5 HighAugust 29, 2024
• wpsoul greenshift, greenshift – animation and page builder blocks +1 more WordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-35765 6.5 MediumJune 19, 2024
• wpsoul table maker WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-34574 5.9 MediumMay 8, 2024
• wpsoul greenshift, greenshift – animation and page builder blocks +1 more Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload CVE-2023-6636 7.2 HighJanuary 11, 2024
• wpsoul greenshift, greenshift – animation and page builder blocks +1 more WordPress Greenshift – animation and page builder blocks Plugin <= 4.9.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-22707 5.9 MediumMarch 27, 2023
• unknown greenshift Greenshift < 5.0 - Contributor+ Stored XSS CVE-2023-0378 5.4 MediumFebruary 21, 2023
• unknown greenshift Greenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via Shortcode CVE-2022-4653 5.4 MediumJanuary 16, 2023