WordPress Plugin Vulnerabilities

Greenshift – animation and page builder blocks <=9.7 - Missing Authorization

Description

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 9.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

Affects Plugins

Plugin icon
greenshift-animation-and-page-builder-blocks
Fixed in 9.8

References

CVE
CVE-2024-50419
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/a1dbd87e-2449-4d59-9f08-f708b93d41cb

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Trương Hữu Phúc (truonghuuphuc)
Verified
No
WPVDB ID
3719fbb9-ebd3-4b82-9984-f865aed0a7ae

Timeline

Publicly Published
2024-10-24 (about 1 year ago)
Added
2024-10-30 (about 1 year ago)
Last Updated
2024-10-30 (about 1 year ago)

Other

Published
Title
Published
2026-04-15
Title
Basic Google Maps Placemarks < 1.10.8 - Missing Authorization to Unauthenticated Default Map Coordinate Update
Published
2025-07-04
Title
Frontend File Manager <= 23.2 - Missing Authorization to Authenticated (Subscriber+) Content Injection
Published
2026-05-12
Title
Cost Calculator Builder < 4.0.2 - Unauthenticated Price Manipulation and Insecure Direct Object Reference
Published
2025-03-27
Title
WP Fast Total Search < 1.79.264 - Missing Authorization
Published
2024-02-26
Title
Rolo Slider <= 1.0.9 - Missing Authorization to Authenticated(Subscriber+) Settings Change