CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 30, 2026, 5:23 AM ET)

What this means for you

This week: 3,335 CVEs published, 225 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,335; Show in the list
Critical, last 7 days: 225; Show in the list
Healthcare-tagged, last 7 days: 3; Show in the list
Known exploited (CISA KEV): 1,764; Show in the list

Showing CVEs that name the product wpsoul:greenshift_animation_and_page_builder_blocks. Show all products

11 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2025-11841	Medium 6.4	Greenshift – animation and page builder blocks <= 12.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes Assigned by Wordfence	Nov 3, 2025
CVE-2026-1927	Medium 5.4	GreenShift - Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css Assigned by Wordfence	Feb 5, 2026
CVE-2026-2593	Medium 6.4	Greenshift – animation and page builder blocks <= 12.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Assigned by Wordfence	Mar 5, 2026
CVE-2026-2589	Medium 5.3	Greenshift – animation and page builder blocks <= 12.8.3 - Unauthenticated Sensitive Information Exposure via Settings Backup Assigned by Wordfence	Mar 5, 2026
CVE-2026-2371	Medium 5.3	Greenshift <= 12.8.3 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' Assigned by Wordfence	Mar 6, 2026
CVE-2026-4895	Medium 6.4	Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute Assigned by Wordfence	Apr 10, 2026
CVE-2026-5093	Medium 4.3	Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings' Assigned by Wordfence	Aug 22, 2026
CVE-2026-5092	Medium 6.4	Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI Assigned by Wordfence	Aug 26, 2026
CVE-2026-93880	Medium 6.1	Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder Assigned by Wordfence	Oct 2, 2026
CVE-2026-107629	Medium 5.4	Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText Assigned by Wordfence	Oct 29, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.