CVE-2026-5092

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customapi action handler in versions up to and including 12.8.9 . The root cause is insufficient sanitization of API responses before output via innerHTML , allowing an aut...