Plugin security history

Greenshift – animation and page builder blocks Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 21 vulnerability records associated with Greenshift – animation and page builder blocks, published between 2022 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

21Total records

0Critical

2High

19Medium

0Low

0Informational

21Patched records

0Currently marked unpatched

2022-03-04First disclosure

2026-04-10Latest disclosure

21 of 21CVE coverage

Use this history

Check and watch Greenshift – animation and page builder blocks.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Check my installed version Watch Greenshift – animation and page builder blocks

Year-by-Year Timeline

Year	Records	Relative volume
2022	2	2 records
2023	3	3 records
2024	4	4 records
2025	7	7 records
2026	5	5 records

Severity Breakdown

Severity	Records	Share
High	2	9.5%
Medium	19	90.5%

Vulnerability-Type Breakdown

Cross-Site Scripting

11 records52.4%

First: 2022. Latest: 2026.

Missing Authorization

7 records33.3%

First: 2022. Latest: 2026.

Arbitrary File Upload

2 records9.5%

First: 2023. Latest: 2025.

Information Disclosure

1 record4.8%

First: 2026. Latest: 2026.

Patch Status

Patched: 21
Currently marked unpatched: 0
Unknown status: 0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

12.9.0
12.8.4
12.8.6
12.6.1
12.2.8
12.1.2
11.5.7
11.4.6
11.1
10.9
9.0.1
9.9.9.4
9.8
9.4
8.9.4
7.6.3
5.0
5.0.0
4.8.9
1.1.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected range	Vulnerability	Published	Patched version	Severity
`*-12.8.9`	Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute	April 10, 2026	12.9.0	Medium
`*-12.8.3`	Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'	March 6, 2026	12.8.4	Medium
`*-12.8.3`	Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup	March 5, 2026	12.8.4	Medium
`*-12.8.5`	Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	March 5, 2026	12.8.6	Medium
`*-12.6`	GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css	February 5, 2026	12.6.1	Medium
`*-12.2.7`	Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes	November 3, 2025	12.2.8	Medium
`*-12.1.1`	Greenshift <= 12.1.1 - Missing Authorization	August 22, 2025	12.1.2	Medium
`*-11.5.5`	Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting	June 5, 2025	11.5.7	Medium
`11.4-11.4.5`	Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload	April 21, 2025	11.4.6	High
`*-11.0.2`	Greenshift <= 11.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting	March 27, 2025	11.1	Medium
`*-10.8`	Greenshift <= 10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting	February 22, 2025	10.9	Medium
`*-9.0.0`	Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting	January 8, 2025	9.0.1	Medium
`*-9.9.9.3`	Greenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure	December 11, 2024	9.9.9.4	Medium
`*-9.7`	Greenshift – animation and page builder blocks <=9.7 - Missing Authorization	October 24, 2024	9.8	Medium
`*-9.3.7`	Greenshift – animation and page builder blocks <= 9.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting	September 16, 2024	9.4	Medium
`*-8.9.3`	Greenshift – animation and page builder blocks <= 8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting	June 17, 2024	8.9.4	Medium
`*-7.6.2`	Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload	December 12, 2023	7.6.3	High
`*-4.9.9`	Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	January 27, 2023	5.0	Medium
`*-4.9.9`	Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Author+) Stored Cross-Site Scripting	January 27, 2023	5.0.0	Medium
`*-4.8.8`	Greenshift – animation and page builder blocks <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	December 23, 2022	4.8.9	Medium
`[*, 1.1.6)`	Freemius SDK <= 2.4.2 - Missing Authorization Checks	March 4, 2022	1.1.6	Medium

Selected source records

Latest Records

MediumCVE-2026-4895

Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute

Published: April 10, 2026

Affected versions: *-12.8.9
Patched versions: 12.9.0

Original Wordfence record

MediumCVE-2026-2371

Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load'

Published: March 6, 2026

Affected versions: *-12.8.3
Patched versions: 12.8.4

Original Wordfence record

MediumCVE-2026-2589

Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup

Published: March 5, 2026

Affected versions: *-12.8.3
Patched versions: 12.8.4

Original Wordfence record

MediumCVE-2026-2593

Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: March 5, 2026

Affected versions: *-12.8.5
Patched versions: 12.8.6

Original Wordfence record

MediumCVE-2026-1927

GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css

Published: February 5, 2026

Affected versions: *-12.6
Patched versions: 12.6.1

Original Wordfence record

MediumCVE-2025-11841

Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes

Published: November 3, 2025

Affected versions: *-12.2.7
Patched versions: 12.2.8

Original Wordfence record

MediumCVE-2025-57884

Greenshift <= 12.1.1 - Missing Authorization

Published: August 22, 2025

Affected versions: *-12.1.1
Patched versions: 12.1.2

Original Wordfence record

MediumCVE-2025-49301

Greenshift <= 11.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: June 5, 2025

Affected versions: *-11.5.5
Patched versions: 11.5.7

Original Wordfence record

Highest-Severity Records

HighCVE-2025-3616

Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload

Published: April 21, 2025

Affected versions: 11.4-11.4.5
Patched versions: 11.4.6

Original Wordfence record

HighCVE-2023-6636

Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload

Published: December 12, 2023

Affected versions: *-7.6.2
Patched versions: 7.6.3

Original Wordfence record

MediumCVE-2025-30873

Greenshift <= 11.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: March 27, 2025

Affected versions: *-11.0.2
Patched versions: 11.1

Original Wordfence record

MediumCVE-2024-44005

Greenshift – animation and page builder blocks <= 9.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: September 16, 2024

Affected versions: *-9.3.7
Patched versions: 9.4

Original Wordfence record

MediumCVE-2025-26884

Greenshift <= 10.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: February 22, 2025

Affected versions: *-10.8
Patched versions: 10.9

Original Wordfence record

MediumCVE-2026-2593

Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published: March 5, 2026

Affected versions: *-12.8.5
Patched versions: 12.8.6

Original Wordfence record

MediumCVE-2026-4895

Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute

Published: April 10, 2026

Affected versions: *-12.8.9
Patched versions: 12.9.0

Original Wordfence record

MediumCVE-2023-22707

Greenshift – animation and page builder blocks <= 4.9.9 - Authenticated (Author+) Stored Cross-Site Scripting

Published: January 27, 2023

Affected versions: *-4.9.9
Patched versions: 5.0.0

Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware Removal WordPress Security Maintenance Contact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory