greenshiftwp records
5 published records for vendor greenshiftwp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-862 Missing Authorization1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-50419No exploit | WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerabilitygreenshiftwp · greenshift - animation and page builder blocks · CWE-863 | Critical9.8 | — | 0.2% | Oct 30, 2024 |
36Monitor | CVE-2025-3616Proof of concept | Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Uploadgreenshiftwp · greenshift - animation and page builder blocks · CWE-434 | High8.8 | — | 2.5% | Apr 22, 2025 |
21Monitor | CVE-2024-6155No exploit | Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Sitegreenshiftwp · greenshift - animation and page builder blocks · CWE-862 | Medium5.4 | — | 0.2% | Jan 9, 2025 |
21Monitor | CVE-2025-26884No exploit | WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerabilitygreenshiftwp · greenshift - animation and page builder blocks · CWE-79 | Medium5.4 | — | 0.2% | Feb 25, 2025 |
17Monitor | CVE-2024-11181No exploit | Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosuregreenshiftwp · greenshift - animation and page builder blocks · CWE-639 | Medium4.3 | — | 0.4% | Dec 12, 2024 |
- CVE-2024-5041939Monitor
WordPress Greenshift plugin <=9.7 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%greenshiftwp · greenshift - animation and page builder blocksOct 30, 2024
- CVE-2025-361636Monitor
Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 8.8Proof of conceptEPSS 2%greenshiftwp · greenshift - animation and page builder blocksApr 22, 2025
- CVE-2024-615521Monitor
Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site
MediumCVSS 5.4No exploitEPSS 0%greenshiftwp · greenshift - animation and page builder blocksJan 9, 2025
- CVE-2025-2688421Monitor
WordPress Greenshift plugin <= 10.8 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%greenshiftwp · greenshift - animation and page builder blocksFeb 25, 2025
- CVE-2024-1118117Monitor
Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure
MediumCVSS 4.3No exploitEPSS 0%greenshiftwp · greenshift - animation and page builder blocksDec 12, 2024