CVE-2024-6155: falha de média gravidade em wpsoul Greenshift – animation and page builder…
Greenshift – animation and page builder blocks <= 9.0.0 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 0.3%
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross Site Scripting in all versions up to, and including, 9.0.0 due to a missing capability check in the greenshift_download_file_localy function, along with no SSRF protection and sanitization on uploaded SVG files. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application that can also be leveraged to download malicious SVG files containing Cross-Site Scripting payloads to the server. On Cloud-based servers, attackers could retrieve the instance metadata. The issue was partially patched in version 8.9.9 and fully patched in version 9.0.1.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
wpsoul · Greenshift – animation and page builder blocksCVEs relacionadas — wpsoul Greenshift – animation and page builder…
No mesmo produto, das mais perigosas para as menos.
CVE-2025-3616HIGHGreenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 2.6%CVE-2023-6636HIGHGreenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File UploadEPSS 1.3%CVE-2024-11181MEDIUMGreenshift – animation and page builder blocks <= 9.9.9.3 - Authenticated (Contributor+) Post DisclosureEPSS 0.5%CVE-2022-4974MEDIUMFreemius SDK <= 2.4.2 - Missing Authorization ChecksEPSS 0.4%CVE-2026-4895MEDIUMGreenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy AttributeEPSS 0.4%CVE-2026-5093MEDIUMGreenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'EPSS 0.4%