GA
Product
Greenshift – animation and page builder blocks
16
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 14Low 0
Watch
Add Greenshift – animation and page builder blocks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3616 | 8.8 | Apr 22 | Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload Affected: 11.4 through 11.4.5 |
| CVE-2023-6636 | 7.2 | Jan 11 | Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload Affected: through 7.6.2 |
| CVE-2026-5092 | 6.4 | Aug 26 | Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI Affected: through 12.8.9 |
| CVE-2026-4895 | 6.4 | Apr 11 | Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute Affected: through 12.8.9 |
| CVE-2026-2593 | 6.4 | Mar 5 | Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 12.8.5 |
| CVE-2025-11841 | 6.4 | Nov 4 | Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes Affected: through 12.2.7 |
| CVE-2026-93880 | 6.1 | Oct 2 | Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder Affected: through 13.2.0 |
| CVE-2026-107627 New | 5.4 | Oct 29 | Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block Affected: through 13.2.1 |
| CVE-2026-107629 New | 5.4 | Oct 29 | Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText Affected: through 13.2.1 |
| CVE-2026-1927 | 5.4 | Feb 5 | GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css Affected: through 12.6 |
| CVE-2024-6155 | 5.4 | Jan 9 | Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting Affected: through 9.0.0 |
| CVE-2024-35765 | 5.4 | Jun 19 | WordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability Affected: through 8.8.9.1 |
| CVE-2026-2371 | 5.3 | Mar 6 | Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' Affected: through 12.8.3 |
| CVE-2026-2589 | 5.3 | Mar 5 | Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup Affected: through 12.8.3 |
| CVE-2026-5093 | 4.3 | Aug 22 | Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings' Affected: through 12.8.9 |
| CVE-2024-11181 | 4.3 | Dec 12 | Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure Affected: through 9.9.9.3 |
Showing 16