Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WpsoulGreenshift

9 matches found

CVE
CVE•added 2024/01/11 9:15 a.m.•58 views

CVE-2023-6636

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'gspb_save_files' function in versions up to, and including, 7.6.2. This makes it possible for authenticated attackers with administrator-level ...

7.2CVSS7.4AI score0.03981EPSS
CVE
CVE•added 2023/01/16 4:15 p.m.•54 views

CVE-2022-4653

The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

5.4CVSS5.3AI score0.00113EPSS
CVE
CVE•added 2025/02/25 3:15 p.m.•53 views

CVE-2025-26884

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows Stored XSS. This issue affects Greenshift: from n/a through 10.8.

6.5CVSS6.8AI score0.00026EPSS
CVE
CVE•added 2024/06/19 11:15 a.m.•50 views

CVE-2024-35765

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Stored XSS.This issue affects Greenshift – animation and page builder blocks: from n/a through 8.8.9.1.

6.5CVSS6.7AI score0.00064EPSS
CVE
CVE•added 2024/09/18 12:15 a.m.•48 views

CVE-2024-44005

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Stored XSS.This issue affects Greenshift – animation and page builder blocks: from n/a through 9.3.7.

6.5CVSS6.2AI score0.00089EPSS
CVE
CVE•added 2023/02/21 9:15 a.m.•45 views

CVE-2023-0378

The Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

6.8CVSS5.3AI score0.00144EPSS
CVE
CVE•added 2025/03/27 11:15 a.m.•45 views

CVE-2025-30873

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows Stored XSS. This issue affects Greenshift: from n/a through 11.0.2.

6.5CVSS6.8AI score0.00039EPSS
CVE
CVE•added 2023/03/27 3:15 p.m.•38 views

CVE-2023-22707

Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin

5.9CVSS5.3AI score0.00051EPSS
CVE
CVE•added 2025/06/06 1:15 p.m.•31 views

CVE-2025-49301

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift allows DOM-Based XSS. This issue affects Greenshift: from n/a through 11.5.5.

6.5CVSS6.5AI score0.00039EPSS