Vulnerability history

Contributor+ SSRF vulnerability

Contributor+ Stored XSS vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI vulnerability

Authenticated (Contributor+) Theme Settings Modification vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute vulnerability

Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' vulnerability

WordPress Greenshift - animation and page builder blocks plugin <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup vulnerability

WordPress Greenshift - animation and page builder blocks plugin <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress GreenShift - Animation and Page Builder Blocks plugin <= 12.5.7 - Authenticated (Subscriber+) Information Disclosure of AI API Keys vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes vulnerability

Broken Access Control Vulnerability

Cross Site Scripting (XSS) Vulnerability

Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting vulnerability

Authenticated (Contributor+) Post Disclosure vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

Authenticated (Administrator+) Arbitrary File Upload vulnerability

Reflected Cross Site Scripting (XSS) vulnerability

Contributor+ Stored XSS Vulnerability

SVG upload to Cross Site Scripting (XSS) vulnerability

Contributor+ Stored XSS via Shortcode vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability