Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Greenshift 13.2.0 Clear all filters
TI-2026-57680 CVE-2026-83544 · GHSA-3fx3-qcp7-48x2

Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute

Priority LOW 32

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00431 Published 2026-09-05 Fixed in 13.2.0 CWE-79
TI-2026-57679 CVE-2026-83543 · GHSA-2737-p883-rmrx

Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

Priority LOW 19

The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary ho…

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00299 Published 2026-09-05 Fixed in 13.2.0 CWE-918