Plugin icon

Greenshift – animation and page builder blocks

greenshift-animation-and-page-builder-blocks

Vulnerabilities:

27

Last Updated:

September 26, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-10-01
Title
Greenshift < 13.2.1 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder
Fixed in
Fixed in 13.2.1
CVSS
6.1 (medium)
Published
2026-09-03
Title
Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute
Fixed in
Fixed in 13.2.0
CVSS
6.8 (medium)
Published
2026-09-03
Title
Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint
Fixed in
Fixed in 13.2.0
CVSS
4.1 (medium)
Published
2026-08-25
Title
Greenshift < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI
Fixed in
Fixed in 12.9.0
CVSS
5.5 (medium)
Published
2026-08-21
Title
Greenshift < 12.9.0 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'
Fixed in
Fixed in 12.9.0
CVSS
2.7 (low)
Published
2026-04-10
Title
Greenshift < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute
Fixed in
Fixed in 12.9.0
CVSS
5.5 (medium)
Published
2026-03-06
Title
Greenshift < 12.8.4 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'
Fixed in
Fixed in 12.8.4
CVSS
5.3 (medium)
Published
2026-03-05
Title
Greenshift – animation and page builder blocks < 12.8.4 - Unauthenticated Sensitive Information Exposure via Settings Backup
Fixed in
Fixed in 12.8.4
CVSS
5.3 (medium)
Published
2026-03-05
Title
Greenshift – animation and page builder blocks < 12.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 12.8.6
CVSS
5.5 (medium)
Published
2026-02-05
Title
GreenShift - Animation and Page Builder Blocks < 12.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css
Fixed in
Fixed in 12.6.1
CVSS
5.4 (medium)
Published
2025-11-03
Title
Greenshift – animation and page builder blocks < 12.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes
Fixed in
Fixed in 12.2.8
CVSS
6.4 (medium)
Published
2025-08-22
Title
Greenshift < 12.1.2 - Missing Authorization
Fixed in
Fixed in 12.1.2
CVSS
4.3 (medium)
Published
2025-06-05
Title
Greenshift < 11.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 11.5.7
CVSS
6.4 (medium)
Published
2025-04-21
Title
Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 11.4.6
CVSS
8.8 (high)
Published
2025-03-27
Title
Greenshift < 11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 11.1
CVSS
6.4 (medium)
Published
2025-02-22
Title
Greenshift < 10.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 10.9
CVSS
6.4 (medium)
Published
2025-01-08
Title
Greenshift – animation and page builder blocks < 9.0.1 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting
Fixed in
Fixed in 9.0.1
CVSS
6.4 (medium)
Published
2024-12-11
Title
Greenshift – animation and page builder blocks < 9.9.9.4 - Authenticated (Contributor+) Post Disclosure
Fixed in
Fixed in 9.9.9.4
CVSS
4.3 (medium)
Published
2024-10-24
Title
Greenshift – animation and page builder blocks <=9.7 - Missing Authorization
Fixed in
Fixed in 9.8
CVSS
5.3 (medium)
Published
2024-09-16
Title
Greenshift – animation and page builder blocks < 9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 9.4
CVSS
6.4 (medium)
Published
2024-06-17
Title
Greenshift – animation and page builder blocks < 8.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.9.4
CVSS
6.4 (medium)
Published
2023-12-12
Title
Greenshift – animation and page builder blocks < 7.6.3 - Authenticated (Administrator+) Arbitrary File Upload
Fixed in
Fixed in 7.6.3
CVSS
7.2 (high)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.3
CVSS
6.1 (medium)
Published
2023-03-27
Title
Greenshift < 5.0.0 - Author+ Stored XSS
Fixed in
Fixed in 5.0.0
CVSS
6.8 (medium)
Published
2023-01-27
Title
Greenshift < 5.0 - Contributor+ Stored XSS
Fixed in
Fixed in 5.0
CVSS
6.8 (medium)
Published
2022-12-23
Title
Greenshift – animation and page builder blocks < 4.8.9 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 4.8.9
CVSS
6.8 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.1.6
CVSS
4.3 (medium)