PatchTheCVE: greenshift - animation and page builder blockshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-3616: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploadhttps://patchthecve.com/cve/CVE-2025-3616.htmlhttps://patchthecve.com/cve/CVE-2025-3616.htmlWed, 17 Jun 2026 09:20:18 +0000HIGH 8.8: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level acceCVE-2025-26884: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Ghttps://patchthecve.com/cve/CVE-2025-26884.htmlhttps://patchthecve.com/cve/CVE-2025-26884.htmlWed, 17 Jun 2026 09:02:32 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through <= 10.8.CVE-2024-6155: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscrhttps://patchthecve.com/cve/CVE-2024-6155.htmlhttps://patchthecve.com/cve/CVE-2024-6155.htmlWed, 17 Jun 2026 08:17:23 +0000MEDIUM 6.4: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross Site Scripting in all versions up to, and including, 9.0.0 due to a missing capability check in the greenshift_download_file_localy functiCVE-2024-11181: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Information Exposure https://patchthecve.com/cve/CVE-2024-11181.htmlhttps://patchthecve.com/cve/CVE-2024-11181.htmlWed, 17 Jun 2026 06:57:13 +0000MEDIUM 4.3: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 9.9.9.3 via the 'wp_reusable_render' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticatedCVE-2024-50419: Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allowshttps://patchthecve.com/cve/CVE-2024-50419.htmlhttps://patchthecve.com/cve/CVE-2024-50419.htmlWed, 17 Jun 2026 08:04:25 +0000MEDIUM 5.4: Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through <= 9.7.