EUVD-2026-71859
GHSA-3fx3-qcp7-48x2
Severity by source
AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Contributor is a low-privilege WordPress role (PR:L); XSS executes in another user's browser context (S:C); no direct availability impact from XSS.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
AnalysisAI
Stored cross-site scripting in the Greenshift WordPress plugin (all versions before 13.2.0) allows any user with Contributor-level access or higher to inject arbitrary JavaScript via an improperly escaped block animation attribute rendered into an HTML attribute context. When a higher-privileged user such as an administrator views the affected content, the injected script executes in their browser session, enabling session hijacking or unauthorized administrative actions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold at minimum a Contributor-level WordPress account on the target site - this is a low-privilege role that is commonly granted to guest bloggers or community contributors. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The published CVSS vector (AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) contains a notable inconsistency: PR:H (High privilege) is assigned, yet the description explicitly states Contributor-level access is sufficient to trigger the vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the Greenshift WordPress plugin to version 13.2.0 or later - this is the vendor-confirmed patched release per WPScan advisory (https://wpscan.com/vulnerability/f2bd202b-43fc-4ca7-9bab-649ed87e7cbd/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Greenshift
View allThe Greenshift WordPress plugin before 5.0 does not validate and escape some of its block options before outputting them
Server-side request forgery in the Greenshift WordPress plugin before 13.2.0 allows contributor-level (and higher) authe
The Greenshift - animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wpsoul Gree
Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor pat
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today