Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
greenshiftwp greenshift - animation and page builder blocks vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv3
CVE-2023-6636
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'gspb_save_files' function in versions up to, and including, 7.6.2. This makes it possible for authenticated ...
Greenshiftwp Greenshift - Animation And Page Builder Blocks
5.4
CVSSv3
CVE-2023-22707
Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions.
Greenshiftwp Greenshift - Animation And Page Builder Blocks
5.4
CVSSv3
CVE-2023-0378
The Greenshift WordPress plugin prior to 5.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Greenshiftwp Greenshift - Animation And Page Builder Blocks
5.4
CVSSv3
CVE-2022-4653
The Greenshift WordPress plugin prior to 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
Greenshiftwp Greenshift - Animation And Page Builder Blocks
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
privilege escalation
CVE-2024-20696
CVE-2024-29829
CVE-2024-33999
CVE-2024-35646
physical
CVE-2024-24919
CVE-2024-31030
local users
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started