# cve.now: Wpsoul

The newest entries naming Wpsoul as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119218](https://cve.now/CVE-2026-119218.md): Greenshift \<= 13.2.2 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Author URL via Interaction Layer attach-attribute… (CVSS 5.4)
- [CVE-2026-120520](https://cve.now/CVE-2026-120520.md): Greenshift \<= 13.2.2 - Unauthenticated Sensitive Information Exposure in Nested {{COOKIE:}} Placeholder via {{GET:}} Parameter (CVSS 5.3)
- [CVE-2026-107627](https://cve.now/CVE-2026-107627.md): Greenshift \<= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block (CVSS 5.4)
- [CVE-2026-107629](https://cve.now/CVE-2026-107629.md): Greenshift \<= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText (CVSS 5.4)
- [CVE-2026-93880](https://cve.now/CVE-2026-93880.md): Greenshift \<= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder (CVSS 6.1)
- [CVE-2026-5092](https://cve.now/CVE-2026-5092.md): Greenshift \<= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI (CVSS 6.4)
- [CVE-2026-5093](https://cve.now/CVE-2026-5093.md): Greenshift \<= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb\_update\_global\_wp\_settings' (CVSS 4.3)
- [CVE-2026-4895](https://cve.now/CVE-2026-4895.md): Greenshift \<= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute (CVSS 6.4)
- [CVE-2026-2371](https://cve.now/CVE-2026-2371.md): Greenshift \<= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb\_el\_reusable\_load' (CVSS 5.3)
- [CVE-2026-2589](https://cve.now/CVE-2026-2589.md): Greenshift – animation and page builder blocks \<= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup (CVSS 5.3)
- [CVE-2026-2593](https://cve.now/CVE-2026-2593.md): Greenshift – animation and page builder blocks \<= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2026-1927](https://cve.now/CVE-2026-1927.md): GreenShift - Animation and Page Builder Blocks \<= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom\_css (CVSS 5.4)
- [CVE-2025-11841](https://cve.now/CVE-2025-11841.md): Greenshift – animation and page builder blocks \<= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes (CVSS 6.4)
- [CVE-2025-57884](https://cve.now/CVE-2025-57884.md): WordPress Greenshift Plugin \<= 12.1.1 - Broken Access Control Vulnerability (CVSS 4.3)
- [CVE-2025-49301](https://cve.now/CVE-2025-49301.md): WordPress Greenshift plugin \<= 11.5.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
- [CVE-2025-3616](https://cve.now/CVE-2025-3616.md): Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
- [CVE-2025-30873](https://cve.now/CVE-2025-30873.md): WordPress Greenshift plugin \<= 11.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-26884](https://cve.now/CVE-2025-26884.md): WordPress Greenshift plugin \<= 10.8 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-6155](https://cve.now/CVE-2024-6155.md): Greenshift – animation and page builder blocks \<= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting (CVSS 6.4)
- [CVE-2024-11181](https://cve.now/CVE-2024-11181.md): Greenshift – animation and page builder blocks \<= 9.9.9.3 - Authenticated (Contributor+) Post Disclosure (CVSS 4.3)
- [CVE-2024-51926](https://cve.now/CVE-2024-51926.md): WordPress GreenCon plugin \<= 1.0.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-50419](https://cve.now/CVE-2024-50419.md): WordPress Greenshift plugin \<=9.7 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2022-4974](https://cve.now/CVE-2022-4974.md): Freemius SDK \<= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- [CVE-2024-44005](https://cve.now/CVE-2024-44005.md): WordPress Greenshift plugin \<= 9.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-43943](https://cve.now/CVE-2024-43943.md): WordPress Greenshift Woocommerce Addon plugin \< 1.9.8 - Subscriber+ SQL Injection vulnerability (CVSS 8.5)
- [CVE-2024-43942](https://cve.now/CVE-2024-43942.md): WordPress Greenshift Query and Meta Addon plugin \< 3.9.2 - Subscriber+ SQL Injection vulnerability (CVSS 8.5)
- [CVE-2024-35765](https://cve.now/CVE-2024-35765.md): WordPress Greenshift – animation and page builder blocks plugin \<= 8.8.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-34574](https://cve.now/CVE-2024-34574.md): WordPress Table Maker plugin \<= 1.9.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2023-6636](https://cve.now/CVE-2023-6636.md): Greenshift – animation and page builder blocks \<= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
- [CVE-2023-22707](https://cve.now/CVE-2023-22707.md): WordPress Greenshift – animation and page builder blocks Plugin \<= 4.9.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/wpsoul
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.