Greenshiftwp develops animation and page-builder block plugins for WordPress, a widely deployed content-management platform where vulnerabilities in editing and rendering components can affect multiple sites. The observed weakness classes—cross-site scripting, authorization bypass, and server-side request forgery—reflect the complexity of plugin input handling and access control in the WordPress ecosystem. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Greenshiftwp over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-3616HIGH The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_reque | Apr 22, 2025 | 8.8 | 29 | NO | NO |
CVE-2024-50419CRITICAL Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This | Oct 30, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-6155MEDIUM The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross Site Scripting in | Jan 9, 2025 | 5.4 | 17 | NO | NO |
CVE-2025-26884MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored X | Feb 25, 2025 | 5.4 | 16 | NO | NO |
CVE-2024-11181MEDIUM The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 9.9.9.3 via the 'wp_reusable_ren | Dec 12, 2024 | 4.3 | 15 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Greenshiftwp.
Media articles that mention a CVE ID that affects a product developed by Greenshiftwp — matched by CVE ID, not by vendor name.