Read the docs

Greenshiftwp

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Greenshiftwp records in CISA KEV

No Greenshiftwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Greenshift - Animation And Page Builder Blocks 5 records MEDIUM

Records

5 records

TI-2025-03183 CVE-2025-3616 · GHSA-42rf-mpmc-c2vf

Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload

Priority MEDIUM 45

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02566 Published 2025-04-22 No fix listed CWE-434
TI-2024-33852 CVE-2024-50419 · GHSA-hjxq-5796-f748

WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability

Priority MEDIUM 42

Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a thro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00295 Published 2024-10-30 No fix listed CWE-863
TI-2025-19755 CVE-2025-26884 · GHSA-2h7h-8366-3477

WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2025-02-25 No fix listed CWE-79
TI-2024-05704 CVE-2024-6155 · GHSA-m7jq-35x5-2p74

Missing authorization in wpsoul Greenshift – animation and page builder blocks

Priority LOW 28

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross Site Scripting in all versions up to, and including, 9.0.0…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00292 Published 2025-01-09 No fix listed CWE-862
TI-2024-10356 CVE-2024-11181 · GHSA-82mx-jrgc-3rxp

Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure

Priority LOW 21

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 9.9.9.3 via the 'wp_reusable_render' shortcode due to insufficient restr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00498 Published 2024-12-12 No fix listed CWE-639
Open these records in search →