WP
Vendor
wpsoul
30
CVEs
0
On KEV
3
New 30D
Products
GA8.8
Greenshift – animation and page builder blocks
wpsoul
15 CVEs0 on KEV3 new
GR9.8
Greenshift
wpsoul
11 CVEs0 on KEV0 new
GR6.5
GreenCon
wpsoul
1 CVEs0 on KEV0 new
GQ8.8
Greenshift Query Addon
Wpsoul
1 CVEs0 on KEV0 new
GQ8.8
Greenshift Query and Meta Addon
Wpsoul
1 CVEs0 on KEV0 new
GW8.8
Greenshift Woocommerce Addon
Wpsoul
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107627 New | GA Greenshift – animation and page builder blocks wpsoul | 5.4 | Oct 29 | Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block |
| CVE-2026-107629 New | GA Greenshift – animation and page builder blocks wpsoul | 5.4 | Oct 29 | Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText |
| CVE-2026-93880 | GA Greenshift – animation and page builder blocks wpsoul | 6.1 | Oct 2 | Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder |
| CVE-2026-5092 | GA Greenshift – animation and page builder blocks wpsoul | 6.4 | Aug 26 | Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI |
| CVE-2026-5093 | GA Greenshift – animation and page builder blocks wpsoul | 4.3 | Aug 22 | Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings' |
| CVE-2026-4895 | GA Greenshift – animation and page builder blocks wpsoul | 6.4 | Apr 11 | Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute |
| CVE-2026-2371 | GA Greenshift – animation and page builder blocks wpsoul | 5.3 | Mar 6 | Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' |
| CVE-2026-2589 | GA Greenshift – animation and page builder blocks wpsoul | 5.3 | Mar 5 | Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup |
| CVE-2026-2593 | GA Greenshift – animation and page builder blocks wpsoul | 6.4 | Mar 5 | Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2026-1927 | GA Greenshift – animation and page builder blocks wpsoul | 5.4 | Feb 5 | GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css |
| CVE-2025-11841 | GA Greenshift – animation and page builder blocks wpsoul | 6.4 | Nov 4 | Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes |
| CVE-2025-57884 | GR Greenshift wpsoul | 4.3 | Aug 22 | WordPress Greenshift Plugin <= 12.1.1 - Broken Access Control Vulnerability |
| CVE-2025-49301 | GR Greenshift wpsoul | 6.5 | Jun 6 | WordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-3616 | GA Greenshift – animation and page builder blocks wpsoul | 8.8 | Apr 22 | Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2025-30873 | GR Greenshift wpsoul | 5.4 | Mar 27 | WordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-26884 | GR Greenshift wpsoul | 5.4 | Feb 25 | WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-6155 | GA Greenshift – animation and page builder blocks wpsoul | 5.4 | Jan 9 | Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting |
| CVE-2024-11181 | GA Greenshift – animation and page builder blocks wpsoul | 4.3 | Dec 12 | Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure |
| CVE-2024-51926 | GR GreenCon wpsoul | 6.5 | Nov 19 | WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-50419 | GR Greenshift wpsoul | 9.8 | Oct 30 | WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability |
| CVE-2024-44005 | GR Greenshift wpsoul | 5.4 | Sep 17 | WordPress Greenshift plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-43943 | GW Greenshift Woocommerce Addon Wpsoul | 8.8 | Aug 29 | WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability |
| CVE-2024-43942 | GQ Greenshift Query and Meta Addon Wpsoul | 8.8 | Aug 29 | WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability |
| CVE-2024-35765 | GA Greenshift – animation and page builder blocks Wpsoul | 5.4 | Jun 19 | WordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-6636 | GR Greenshift Wpsoul | 7.2 | Jan 11 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'gspb_save_files'… |
| CVE-2023-22707 | GR Greenshift Wpsoul | 5.4 | Mar 27 | Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions |
| CVE-2023-0378 | GR Greenshift Wpsoul | 5.4 | Feb 21 | The Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could… |
| CVE-2022-4653 | GR Greenshift Wpsoul | 5.4 | Jan 16 | The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform… |