CVE-2024-6155

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross Site Scripting in all versions up to, and including, 9.0.0 due to a missing capability check in the greenshift_download_file_localy function, along with no SSRF protection and sanitization on uploaded SVG files. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application that can also be leveraged to download malicious SVG files containing Cross-Site Scripting payloads to the server. On Cloud-based servers, attackers could retrieve the instance metadata. The issue was partially patched in version 8.9.9 and fully patched in version 9.0.1.

• CWE-862
• CWE-79
• CWE-918

• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/8.9.8/settings.php#L1385Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3cfaf4-67c8-47af-bd58-e8ad27a03fae?source=cveThird Party Advisory

Published

Jan 9, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6149Redirection of users to a vulnerable URL in Citrix Workspace…6.1
• CVE-2024-6150A non-admin user can cause short-term disruption in Target V…4.3
• CVE-2024-6151Local Privilege escalation allows a low-privileged user to g…7.8
• CVE-2024-6152The Flipbox Builder plugin for WordPress is vulnerable to PH…8.8
• CVE-2024-6153Parallels Desktop Updater Protection Mechanism Failure Softw…7.8
• CVE-2024-6154Parallels Desktop Toolgate Heap-based Buffer Overflow Local …6.7
• CVE-2024-6156Mark Laing discovered that LXD's PKI mode, until version 5.2…3.8
• CVE-2024-6157An attacker who successfully exploited these vulnerabilities…5.1
• CVE-2024-6158The Category Posts Widget WordPress plugin before 4.9.17, te…4.8
• CVE-2024-6159The Push Notification for Post and BuddyPress WordPress plug…9.8
• CVE-2024-6160SQL Injection vulnerability in MegaBIP software allows attac…9.3
• CVE-2024-6161The Default Thumbnail Plus plugin for WordPress is vulnerabl…8.8