PLUGIN SECURITY
Is Greenshift – animation and page builder blocks safe?
More than 20 special blocks for Gutenberg to build complex pages and animations with highest possible web vitals score.
What this plugin does
- Slug:
greenshift-animation-and-page-builder-blocks - Author: wpsoul
- 70000+ active installs
- 96/100 rating (107 reviews on wordpress.org)
- 4075860 all-time downloads
- On WordPress.org since 2022-01-16
animationfull-site-editinggutenberg blockspage builderwoocommerce blocks
Maintenance status
- Latest known version: 13.1.4
- Last updated: 2026-11-04 6:41pm GMT
- Tested up to WordPress: 7.2
- Requires PHP: 7.3+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
30 known CVEs on file for Greenshift – animation and page builder blocks.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-120520 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.3 | Exposure of Sensitive Information to an Unauthorized Actor | Medium 5.3 | < 13.2.3 | 13.2.3 | 2026-11-06 | ⚠ update needed |
| CVE-2026-119218 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 13.2.3 | 13.2.3 | 2026-11-06 | ⚠ update needed |
| CVE-2026-107627 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 13.2.2 | 13.2.2 | 2026-10-28 | ⚠ update needed |
| CVE-2026-107629 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 13.2.2 | 13.2.2 | 2026-10-28 | ⚠ update needed |
| CVE-2026-83544 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Unknown | < 13.2.0 | 13.2.0 | 2026-09-05 | ⚠ update needed |
| CVE-2026-83543 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.0 | Server-Side Request Forgery (SSRF) | Unknown | < 13.2.0 | 13.2.0 | 2026-09-05 | ⚠ update needed |
| CVE-2026-93880 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 13.2.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 13.2.1 | 13.2.1 | 2026-09-05 | ⚠ update needed |
| CVE-2026-5092 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.9.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 12.9.0 | 12.9.0 | 2026-08-21 | ✓ fixed in latest |
+ 34 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-5093 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.9.0 | Missing Authorization | Medium 4.3 | < 12.9.0 | 12.9.0 | 2026-04-10 | ✓ fixed in latest |
| CVE-2025-11841 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.2.8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 12.2.8 | 12.2.8 | 2025-11-03 | ✓ fixed in latest |
| CVE-2025-57884 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.1.2 | Missing Authorization | Medium 4.3 | < 12.1.2 | 12.1.2 | 2025-08-22 | ✓ fixed in latest |
| CVE-2025-49301 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 11.5.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 11.5.7 | 11.5.7 | 2025-06-05 | ✓ fixed in latest |
| CVE-2025-30873 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 11.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 11.1 | 11.1 | 2025-03-27 | ✓ fixed in latest |
| CVE-2025-26884 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 10.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 10.9 | 10.9 | 2025-02-22 | ✓ fixed in latest |
| CVE-2024-11181 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 9.9.9.4 | Authorization Bypass Through User-Controlled Key | Medium 4.3 | < 9.9.9.4 | 9.9.9.4 | 2024-12-11 | ✓ fixed in latest |
| CVE-2024-50419 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 9.8 | Incorrect Authorization | Medium 5.4 | < 9.8 | 9.8 | 2024-10-24 | ✓ fixed in latest |
| CVE-2024-44005 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 9.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 9.4 | 9.4 | 2024-09-16 | ✓ fixed in latest |
| CVE-2024-35765 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 8.9.4 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 8.9.4 | 8.9.4 | 2024-06-17 | ✓ fixed in latest |
| CVE-2023-6636 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 7.6.3 | Unrestricted Upload of File with Dangerous Type | High 7.2 | < 7.6.3 | 7.6.3 | 2023-12-12 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 4.8.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 4.8.1 | 4.8.1 | 2023-07-18 | ✓ fixed in latest |
| CVE-2023-22707 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 5.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 5.0 | 5.0 | 2023-01-27 | ✓ fixed in latest |
| CVE-2023-0378 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 5.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 5.0 | 5.0 | 2023-01-27 | ✓ fixed in latest |
| CVE-2022-4653 | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 4.8.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.8.9 | 4.8.9 | 2022-12-23 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 1.1.6 | Missing Authorization | Medium 6.3 | < 1.1.6 | 1.1.6 | 2022-03-04 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 1.1.4 | — | Unknown | < 1.1.4 | 1.1.4 | 2022-02-28 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 1.1.4 | — | Unknown | < 1.1.4 | 1.1.4 | 2022-02-28 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 9.0.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 9.0.1 | 9.0.1 | 0000-00-00 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 11.4.6 | Unrestricted Upload of File with Dangerous Type | High 8.8 | < 11.4.6 | 11.4.6 | 0000-00-00 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.9.0 | — | Medium 6.4 | < 12.9.0 | 12.9.0 | 0000-00-00 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.8.4 | — | Unknown | < 12.8.4 | 12.8.4 | 0000-00-00 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.8.6 | — | Unknown | < 12.8.6 | 12.8.6 | 0000-00-00 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.8.4 | — | Unknown | < 12.8.4 | 12.8.4 | 0000-00-00 | ✓ fixed in latest |
| — | Greenshift – animation and page builder blocks [greenshift-animation-and-page-builder-blocks] < 12.6.1 | — | Unknown | < 12.6.1 | 12.6.1 | 0000-00-00 | ✓ fixed in latest |
| — | Unauthorised AJAX Calls via Freemius | — | Unknown | < 1.1.6 | 1.1.6 | — | ✓ fixed in latest |
| CVE-2023-33999 | Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting | — | Unknown | < 4.3 | 4.3 | — | ✓ fixed in latest |
| CVE-2024-6155 | Greenshift – animation and page builder blocks < 9.0.1 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting | — | Unknown | < 9.0.1 | 9.0.1 | — | ✓ fixed in latest |
| CVE-2025-3616 | Greenshift 11.4 - 11.4.5 - Authenticated (Subscriber+) Arbitrary File Upload | — | Unknown | < 11.4.6 | 11.4.6 | — | ✓ fixed in latest |
| CVE-2026-1927 | GreenShift - Animation and Page Builder Blocks < 12.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and Stored Cross-Site Scripting via custom_css | — | Unknown | < 12.6.1 | 12.6.1 | — | ✓ fixed in latest |
| CVE-2026-2593 | Greenshift – animation and page builder blocks < 12.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | — | Unknown | < 12.8.6 | 12.8.6 | — | ✓ fixed in latest |
| CVE-2026-2589 | Greenshift – animation and page builder blocks < 12.8.4 - Unauthenticated Sensitive Information Exposure via Settings Backup | — | Unknown | < 12.8.4 | 12.8.4 | — | ✓ fixed in latest |
| CVE-2026-2371 | Greenshift < 12.8.4 - Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' | — | Unknown | < 12.8.4 | 12.8.4 | — | ✓ fixed in latest |
| CVE-2026-4895 | Greenshift < 12.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute | — | Unknown | < 12.9.0 | 12.9.0 | — | ✓ fixed in latest |
How to fix it
Keep Greenshift – animation and page builder blocks updated — 13.1.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Custom Fonts – Host Your Fonts Locally — 400000+ active installs — 86/100 (62) — max PHP 8.4
- Blocks Animation: CSS Animations for Gutenberg Blocks — 90000+ active installs — 96/100 (73) — max PHP 8.4
- UiCore Animate – Free Animations, Transitions, and Interactions Addon for Elementor & Gutenberg blocks — 40000+ active installs — 64/100 (10) — max PHP 8.4
- Animation Addons – Elementor Addons, GSAP Animations, Elementor V4 Atomic Widgets & Elementor Templates — 10000+ active installs — 92/100 (68)
- Animations for Blocks — 10000+ active installs — 96/100 (27)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.