Skip to main content

Greenshift Animation And Page Builder Blocks CVE-2024-50419

MEDIUM
Incorrect Authorization (CWE-863)
2024-10-30 audit@patchstack.com
WordPress Authentication Bypass Greenshift Animation And Page Builder Blocks Wordpress Plugin Greenshiftwp
5.4
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.4 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

4
Severity Changed
Apr 23, 2026 - 15:22 NVD
CRITICAL MEDIUM
CVSS changed
Apr 23, 2026 - 15:22 NVD
9.8 (CRITICAL) 5.4 (MEDIUM)
CVE Published
Oct 30, 2024 - 15:15 cve.org
MEDIUM 5.4
CVE Published
Oct 30, 2024 - 15:15 nvd
CRITICAL 9.8

DescriptionCVE.org

Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through <= 9.7.

AnalysisAI

Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.7. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Incorrect Authorization (CWE-863), which allows attackers to bypass authorization checks to access restricted resources. Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.7. Affected products include: Greenshiftwp Greenshift - Animation And Page Builder Blocks.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Review and test authorization logic, implement consistent access control checks, use centralized authorization framework.

More in Greenshift Animation And Page Builder Blocks

View all
CVE-2025-3616 HIGH
8.8 Apr 22

The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m
CVE-2025-26884 MEDIUM
6.5 Feb 25

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift

CVE-2026-4895 MEDIUM
6.4 Apr 11

Stored cross-site scripting in GreenShift - Animation and Page Builder Blocks plugin for WordPress up to version 12.8.9

CVE-2026-5092 MEDIUM
6.4 Aug 26

Stored Cross-Site Scripting in the Greenshift animation and page builder blocks WordPress plugin (versions up to and inc
CVE-2026-5093 MEDIUM
4.3 Aug 22

Unauthorized global theme modification in the GreenShift - Animation and Page Builder Blocks WordPress plugin (versions

CVE-2024-11181 MEDIUM
4.3 Dec 12

The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to Information Exposure in all ver
CVE-2024-6155 MEDIUM
6.4 Jan 09

The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Ser

Same weakness CWE-863 – Incorrect Authorization

View all
CVE-2025-54253 CRITICAL POC
10.0
CVE-2025-24200 MEDIUM
6.1
CVE-2026-42016 HIGH POC
8.8
CVE-2023-21715 HIGH
7.3
CVE-2025-21480 HIGH
8.6
CVE-2025-21479 HIGH
8.6
CVE-2025-32462 HIGH POC
8.8
CVE-2017-4915 HIGH POC
7.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2024-50419 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy