Wpsoul develops a suite of WordPress plugins centered on the Greenshift page builder and its e-commerce and query-builder extensions, targeting WordPress site creators and developers. The vendor's disclosures concentrate on classic web-application input-handling weaknesses: cross-site scripting, SQL injection, and unrestricted file upload flaws that are common to WordPress plugin ecosystems. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Wpsoul over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-50419CRITICAL Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This | Oct 30, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-43943HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Woocommerce Addon allows SQL Injection.This issue affects Gr | Aug 29, 2024 | 8.8 | 24 | NO | NO |
CVE-2024-43942HIGH Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects | Aug 29, 2024 | 8.8 | 24 | NO | NO |
CVE-2023-6636HIGH The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'gspb_save_files' functio | Jan 11, 2024 | 7.2 | 21 | NO | NO |
CVE-2022-4653MEDIUM The Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stor | Jan 16, 2023 | 5.4 | 21 | NO | NO |
CVE-2023-22707MEDIUM Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin <= 4.9.9 versions. | Mar 27, 2023 | 5.4 | 19 | NO | NO |
CVE-2025-49301MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows DOM-Base | Jun 6, 2025 | 6.5 | 18 | NO | NO |
CVE-2025-57884MEDIUM Missing Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This i | Aug 22, 2025 | 4.3 | 17 | NO | NO |
CVE-2025-30873MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored X | Mar 27, 2025 | 5.4 | 17 | NO | NO |
CVE-2025-26884MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored X | Feb 25, 2025 | 5.4 | 16 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Wpsoul.
Media articles that mention a CVE ID that affects a product developed by Wpsoul — matched by CVE ID, not by vendor name.