Log in Start free

Wpsoul

Products

ProductCVEsExploitedLatest
Greenshift – animation and page builder blocks19–Nov 7, 2026
Greenshift6–Aug 22, 2025
GreenCon1–Nov 19, 2024
Greenshift Query and Meta Addon1–Aug 29, 2024
Greenshift Woocommerce Addon1–Aug 29, 2024
Table Maker1–May 8, 2024

Exploited and recent CVEs

  • CVE-2026-119218 Medium 5.4 Greenshift <= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute to Counter data-prefix –
  • CVE-2026-120520 Medium 5.3 Greenshift <= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter –
  • CVE-2026-107627 Medium 5.4 Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block 0.3%
  • CVE-2026-107629 Medium 5.4 Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText 0.3%
  • CVE-2026-93880 Medium 6.1 Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder 0.2%
  • CVE-2026-5092 Medium 6.4 Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI 0.4%
  • CVE-2026-5093 Medium 4.3 Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings' 0.4%
  • CVE-2026-4895 Medium 6.4 Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute 0.4%
  • CVE-2026-2371 Medium 5.3 Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' 0.3%
  • CVE-2026-2589 Medium 5.3 Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup 0.3%
  • CVE-2026-2593 Medium 6.4 Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2026-1927 Medium 5.4 GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css 0.2%
  • CVE-2025-11841 Medium 6.4 Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes 0.2%
  • CVE-2025-57884 Medium 4.3 WordPress Greenshift Plugin <= 12.1.1 - Broken Access Control Vulnerability 0.2%
  • CVE-2025-49301 Medium 6.5 WordPress Greenshift plugin <= 11.5.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-3616 High 8.8 Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload 2.6%
  • CVE-2025-30873 Medium 6.5 WordPress Greenshift plugin <= 11.0.2 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-26884 Medium 6.5 WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-6155 Medium 6.4 Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting 0.3%
  • CVE-2024-11181 Medium 4.3 Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure 0.5%
  • CVE-2024-51926 Medium 6.5 WordPress GreenCon plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-50419 Medium 5.4 WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability 0.3%
  • CVE-2024-44005 Medium 6.5 WordPress Greenshift plugin <= 9.3.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-43943 High 8.5 WordPress Greenshift Woocommerce Addon plugin < 1.9.8 - Subscriber+ SQL Injection vulnerability 0.4%
  • CVE-2024-43942 High 8.5 WordPress Greenshift Query and Meta Addon plugin < 3.9.2 - Subscriber+ SQL Injection vulnerability 0.4%
  • CVE-2024-35765 Medium 6.5 WordPress Greenshift – animation and page builder blocks plugin <= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-34574 Medium 5.9 WordPress Table Maker plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-6636 High 7.2 Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload 1.3%
  • CVE-2023-22707 Medium 5.9 WordPress Greenshift – animation and page builder blocks Plugin <= 4.9.9 is vulnerable to Cross Site Scripting (XSS) 0.4%