Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

wpsoul vulnerabilities

30 published CVEs name wpsoul among the affected products.

Published CVEs
30
Last 12 months
12
Critical
0
Known exploited
0

Critical 0High 4Medium 26Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 202410
  3. 20257
  4. 202612

Newest CVEs

  • CVE-2026-119218

    Greenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefix

    wpsoul · Greenshift – animation and page builder blocks

    Medium5.4
  • CVE-2026-120520

    Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter

    wpsoul · Greenshift – animation and page builder blocks

    Medium5.3
  • CVE-2026-107627

    Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block

    wpsoul · Greenshift – animation and page builder blocks

    Medium5.4
  • CVE-2026-107629

    Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText

    wpsoul · Greenshift – animation and page builder blocks

    Medium5.4
  • CVE-2026-93880

    Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

    wpsoul · Greenshift – animation and page builder blocks

    Medium6.1
  • CVE-2026-5092

    Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI

    wpsoul · Greenshift – animation and page builder blocks

    Medium6.4
  • CVE-2026-5093

    Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'

    wpsoul · Greenshift – animation and page builder blocks

    Medium4.3
  • CVE-2026-4895

    Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute

    wpsoul · Greenshift – animation and page builder blocks

    Medium6.4
  • CVE-2026-2371

    Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'

    wpsoul · Greenshift – animation and page builder blocks

    Medium5.3
  • CVE-2026-2589

    Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup

    wpsoul · Greenshift – animation and page builder blocks

    Medium5.3