wpsoul vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202410
3. 20257
4. 202610

Newest CVEs

• CVE-2026-107627

  Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block

  wpsoul · Greenshift – animation and page builder blocks

  Medium5.4
• CVE-2026-107629

  Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText

  wpsoul · Greenshift – animation and page builder blocks

  Medium5.4
• CVE-2026-93880

  Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

  wpsoul · Greenshift – animation and page builder blocks

  Medium6.1
• CVE-2026-5092

  Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI

  wpsoul · Greenshift – animation and page builder blocks

  Medium6.4
• CVE-2026-5093

  Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'

  wpsoul · Greenshift – animation and page builder blocks

  Medium4.3
• CVE-2026-4895

  Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute

  wpsoul · Greenshift – animation and page builder blocks

  Medium6.4
• CVE-2026-2371

  Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'

  wpsoul · Greenshift – animation and page builder blocks

  Medium5.3
• CVE-2026-2589

  Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup

  wpsoul · Greenshift – animation and page builder blocks

  Medium5.3
• CVE-2026-2593

  Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpsoul · Greenshift – animation and page builder blocks

  Medium6.4
• CVE-2026-1927

  GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css

  wpsoul · Greenshift – animation and page builder blocks

  Medium5.4