wpsoul vulnerabilities
30 published CVEs name wpsoul among the affected products.
- Published CVEs
- 30
- Last 12 months
- 12
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 26Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 202410
- 20257
- 202612
Newest CVEs
- CVE-2026-119218
Greenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefix
wpsoul · Greenshift – animation and page builder blocks
Medium5.4 - CVE-2026-120520
Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter
wpsoul · Greenshift – animation and page builder blocks
Medium5.3 - CVE-2026-107627
Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block
wpsoul · Greenshift – animation and page builder blocks
Medium5.4 - CVE-2026-107629
Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText
wpsoul · Greenshift – animation and page builder blocks
Medium5.4 - CVE-2026-93880
Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder
wpsoul · Greenshift – animation and page builder blocks
Medium6.1 - CVE-2026-5092
Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI
wpsoul · Greenshift – animation and page builder blocks
Medium6.4 - CVE-2026-5093
Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'
wpsoul · Greenshift – animation and page builder blocks
Medium4.3 - CVE-2026-4895
Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute
wpsoul · Greenshift – animation and page builder blocks
Medium6.4 - CVE-2026-2371
Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'
wpsoul · Greenshift – animation and page builder blocks
Medium5.3 - CVE-2026-2589
Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup
wpsoul · Greenshift – animation and page builder blocks
Medium5.3
Products with the most CVEs
Most common weaknesses
- CWE-79 Cross-site scripting (XSS)17
- CWE-862 Missing authorization6
- CWE-200 Exposure of sensitive information2
- CWE-434 Unrestricted file upload2
- CWE-89 SQL injection2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-863 Incorrect authorization1
- CWE-918 Server-side request forgery (SSRF)1