CVE-2026-83544

Greenshift WordPress plugin versions before 13.2.0 contain a stored cross-site scripting (XSS) vulnerability in the block animation customProps attribute. The attribute is not properly escaped before being output within an HTML attribute context, allowing any authenticated user with Contributor l...

EUVD-2026-71859

The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed...