SecAlerts
g

greenshift

Security Risk Profile

35
/100
low

Security Risk Score

Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from December 12, 2024 to present

11
Total CVEs
1
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
35/100
low
🆕 2Fresh (<7d)📈 3 in Last 30 Days

Severity Distribution

Critical
0
High
1
Medium
10
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
2

Age Distribution

Common Weaknesses (CWE)

1
XSS
7
2
SSRF
2
3
Malicious File Upload
1

Most Affected Products

1. Greenshift animation and page builder blocks3
2. Greenshiftwp Greenshift - Animation And Page Builder Blocks Wordpress3
3. Greenshift Greenshift – animation and page builder blocks plugin for WordPress2
4. GreenShift GreenShift – Animation and Page Builder Blocks plugin2
5. Greenshift Greenshift WordPress plugin2

Recent Vulnerabilities

See more →
CVE-2026-107629
CVSS 5.4medium

Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText

Oct 29, 2026🔧 No Patch
CVE-2026-107627
CVSS 5.4medium

Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block

Oct 29, 2026🔧 No Patch
CVE-2026-93880
CVSS 6.1medium

Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

Oct 2, 2026🔧 No Patch
CVE-2026-83543
CVSS 4.1medium

Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

Sep 5, 2026🔧 No Patch
CVE-2026-83544
CVSS 6.8medium

Greenshift < 13.2.0 - Contributor+ Stored XSS via Block Animation customProps Attribute

Sep 5, 2026🔧 No Patch
CVE-2026-5093
CVSS 4.3medium

Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'

Aug 22, 2026🔧 No Patch
CVE-2026-4895
CVSS 6.4EPSS 0%medium

Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute

Apr 11, 2026🔧 No Patch
CVE-2025-11841
CVSS 6.4medium

Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes

Nov 4, 2025🔧 No Patch
CVE-2025-3616
CVSS 8.8EPSS 0%high

Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload

Apr 22, 2025
CVE-2024-6155
CVSS 6.4medium

Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting

Jan 9, 2025🔧 No Patch

Monitor greenshift in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.