CVE-2025-3616: Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspbmakeproxyapirequest() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3616?
CVE-2025-3616 is classified as a high severity vulnerability due to its potential for arbitrary file uploads.
How do I fix CVE-2025-3616?
To fix CVE-2025-3616, upgrade the Greenshift plugin to version 11.4.6 or later.
Who is affected by CVE-2025-3616?
Authenticated users with subscriber privileges using Greenshift plugin versions 11.4 to 11.4.5 are affected by CVE-2025-3616.
What is the primary issue with CVE-2025-3616?
The primary issue with CVE-2025-3616 is the lack of proper file type validation, allowing arbitrary file uploads.
What versions of Greenshift are impacted by CVE-2025-3616?
CVE-2025-3616 impacts Greenshift plugin versions from 11.4 to 11.4.5.