WordPress security by component
Greenshift – animation and page builder blocks
Plugin description
Greenshift – animation and page builder blocks is a WordPress component with 16 published CVE records in this archive. The latest tracked vulnerability was published Apr 11, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
greenshift-animation-and-page-builder-blocksLatest vulnerability
CVE-2026-4895: Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 12.8.9.
Known source slugs: greenshift---animation-and-page-builder-blocks, greenshift-animation-and-page-builder-blocks
| Safe version |
|
||
|---|---|---|---|
| Apr 11, 2026 |
CVE-2026-4895
Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 12.8.9.
|
> 12.8.9 |
CVE6.4
NVDPending
|
| Mar 07, 2026 |
CVE-2026-2371
Greenshift – animation and page builder blocks: A security weakness
Greenshift – animation and page builder blocks is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Mar 06, 2026 |
CVE-2026-2589
Greenshift – animation and page builder blocks: Sensitive information exposure
Greenshift – animation and page builder blocks is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Mar 05, 2026 |
CVE-2026-2593
Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Feb 05, 2026 |
CVE-2026-1927
Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exploitation requires at least subscriber-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Nov 04, 2025 |
CVE-2025-11841
Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Aug 22, 2025 |
CVE-2025-57884
Greenshift: A security weakness
Greenshift is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Jun 06, 2025 |
CVE-2025-49301
Greenshift: Cross-site scripting
Greenshift is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Apr 22, 2025 |
CVE-2025-3616
Greenshift – animation and page builder blocks: Dangerous file upload
Greenshift – animation and page builder blocks is affected by dangerous file upload. Exploitation requires at least subscriber-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Feb 25, 2025 |
CVE-2025-26884
Greenshift: Cross-site scripting
Greenshift is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Jan 09, 2025 |
CVE-2024-6155
Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exploitation requires at least subscriber-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Dec 12, 2024 |
CVE-2024-11181
Greenshift – animation and page builder blocks: A security weakness
Greenshift – animation and page builder blocks is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 30, 2024 |
CVE-2024-50419
Greenshift: A security weakness
Greenshift is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.4
NVD9.8
|
| Jun 19, 2024 |
CVE-2024-35765
Greenshift – animation and page builder blocks: Cross-site scripting
Greenshift – animation and page builder blocks is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Jan 11, 2024 |
CVE-2023-6636
Greenshift – animation and page builder blocks: Dangerous file upload
Greenshift – animation and page builder blocks is affected by dangerous file upload. Exploitation requires an authenticated WordPress account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE7.2
NVD7.2
|
| Mar 27, 2023 |
CVE-2023-22707
Greenshift Animation And Page Builder Blocks: Cross-site scripting
Greenshift Animation And Page Builder Blocks is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.9
NVD5.4
|