Wpsoul vulnerabilities
We track 5 vulnerabilities in Wpsoul products across 5 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on April 22, 2025.
Latest Wpsoul vulnerabilities
- 8.8 High severity
Greenshift – animation and page builder blocks: Unrestricted Upload of File with Dangerous Type
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticat
- 9.8 Critical severity
Greenshift: Incorrect Authorization
Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through <= 9.7.
- 8.8 High severity
Greenshift Woocommerce Addon: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Woocommerce Addon allows SQL Injection.This issue affects Greenshift Woocommerce Addon: from n/a before 1.9.8.
- 8.8 High severity
Greenshift Query and Meta Addon: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wpsoul Greenshift Query and Meta Addon allows SQL Injection.This issue affects Greenshift Query and Meta Addon: from n/a before 3.9.2.
- 7.2 High severity
Greenshift – animation and page builder blocks: Unrestricted Upload of File with Dangerous Type
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'gspb_save_files' function in versions up to, and including, 7.6.2. This makes it possible for authentica