Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Greenshiftwp Clear all filters
TI-2025-03183 CVE-2025-3616 · GHSA-42rf-mpmc-c2vf

Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload

Priority MEDIUM 45

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02566 Published 2025-04-22 No fix listed CWE-434
TI-2025-19755 CVE-2025-26884 · GHSA-2h7h-8366-3477

WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2025-02-25 No fix listed CWE-79
TI-2024-05704 CVE-2024-6155 · GHSA-m7jq-35x5-2p74

Missing authorization in wpsoul Greenshift – animation and page builder blocks

Priority LOW 28

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross Site Scripting in all versions up to, and including, 9.0.0…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00292 Published 2025-01-09 No fix listed CWE-862
TI-2024-10356 CVE-2024-11181 · GHSA-82mx-jrgc-3rxp

Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure

Priority LOW 21

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 9.9.9.3 via the 'wp_reusable_render' shortcode due to insufficient restr…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00498 Published 2024-12-12 No fix listed CWE-639
TI-2024-33852 CVE-2024-50419 · GHSA-hjxq-5796-f748

WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability

Priority MEDIUM 42

Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a thro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00295 Published 2024-10-30 No fix listed CWE-863