CVE-2025-26884

中危 5.4CVE-2025-26884 · Published 25/02/2025 · updated 17/06/2026

要点

CVE-2025-26884 是影响 greenshift - animation and page builder blocks (greenshiftwp) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.29%，高于 21.4% 的漏洞。
修复：升级到 10.9 或更高版本。

Package	Affected versions	Patched versions
greenshift - animation and page builder blocks greenshiftwp	`< 10.9`	`10.9`

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Stored XSS.This issue affects Greenshift: from n/a through <= 10.8.

References

patchstack.com/database/Wordpress/Plugin/greenshift-animation-and-page-builder-blocks/vulnerability/wordpress-greenshift-plugin-10-8-cross-site-scripting-xss-vulnerability · Third Party Advisory

greenshift - animation and page builder blocks 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

greenshift - animation and page builder blocks

greenshiftwp

< 10.9

10.9

greenshift - animation and page builder blocks 的其他漏洞

查看全部 →