Skip to contentWpsoul Greenshift vulnerabilities
- wpsoul greenshift – animation and page builder blocksGreenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefixCVE-2026-1192185.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} ParameterCVE-2026-1205205.3 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerTextCVE-2026-1076295.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments BlockCVE-2026-1076275.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic PlaceholderCVE-2026-938806.1 Medium
- unknown greenshiftGreenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps AttributeCVE-2026-835446.8 Medium
- unknown greenshiftGreenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST EndpointCVE-2026-835434.1 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URICVE-2026-50926.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'CVE-2026-50934.3 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy AttributeCVE-2026-48956.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'CVE-2026-23715.3 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings BackupCVE-2026-25895.3 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-25936.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_cssCVE-2026-19275.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data AttributesCVE-2025-118416.4 Medium
- wpsoul greenshiftWordPress Greenshift Plugin <= 12.1.1 - Broken Access Control VulnerabilityCVE-2025-578844.3 Medium
- wpsoul greenshiftWordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-493016.5 Medium
- wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 moreGreenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2025-3616Public exploit8.8 High
- wpsoul greenshiftWordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-308736.5 Medium
- wpsoul greenshift, greenshiftwp greenshift - animation and page builder blocks +1 moreWordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-268846.5 Medium
- wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 moreGreenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site ScriptingCVE-2024-61556.4 Medium
- wpsoul greenshift – animation and page builder blocks, greenshiftwp greenshift - animation and page builder blocks +1 moreGreenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post DisclosureCVE-2024-111814.3 Medium
- wpsoul greenshift, greenshiftwp greenshift - animation and page builder blocks +1 moreWordPress Greenshift plugin <=9.7 - Broken Access Control vulnerabilityCVE-2024-504195.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- wpsoul greenshiftWordPress Greenshift plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440056.5 Medium
- wpsoul greenshift woocommerce addonWordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerabilityCVE-2024-439438.5 High
- wpsoul greenshift query and meta addon, greenshift query addon +1 moreWordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerabilityCVE-2024-439428.5 High
- wpsoul greenshift, greenshift – animation and page builder blocks +1 moreWordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-357656.5 Medium
- wpsoul greenshift, greenshift – animation and page builder blocks +1 moreGreenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File UploadCVE-2023-66367.2 High
- wpsoul greenshift, greenshift – animation and page builder blocks +1 moreWordPress Greenshift – animation and page builder blocks Plugin <= 4.9.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-227075.9 Medium
- unknown greenshiftGreenshift < 5.0 - Contributor+ Stored XSSCVE-2023-03785.4 Medium
- unknown greenshiftGreenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via ShortcodeCVE-2022-46535.4 Medium