CVE-2026-5093

The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This is due to a missing capability check on the 'gspb_update_global_wp_settings' function that only verifies the 'edit_posts' capability instead of requiring administrative privileges. This makes it possible for authenticated attackers, with contributor-level access and above, to modify global WordPress theme color settings site-wide, leading to site defacement.

• CWE-862

• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/10.8/init.php#L2686
• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/10.8/init.php#L3092
• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/tags/10.8/init.php#L3143
• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/trunk/init.php#L2686
• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/trunk/init.php#L3092
• https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/trunk/init.php#L3143
• https://plugins.trac.wordpress.org/changeset/3494855/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/69911634-1281-487c-87f1-37f6e4b016c9?source=cve

Published

Aug 22, 2026

Last Modified

Aug 24, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50891Incorrect access control in the /admin/api/config component …8.1
• CVE-2026-50892Incorrect access control in the "Let's Encrypt" certificate …6.5
• CVE-2026-50894easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of F…9.8
• CVE-2026-5090Template::Plugin::HTML versions before 3.103 for Perl allows…6.1
• CVE-2026-5091Catalyst::Plugin::Authentication versions through 0.10024 fo…5.1
• CVE-2026-5092The Greenshift – animation and page builder blocks plugin fo…6.4
• CVE-2026-5096The Everest Forms plugin for WordPress is vulnerable to Serv…5.3
• CVE-2026-5097The wpForo Forum plugin for WordPress is vulnerable to SQL I…7.5
• CVE-2026-50979A command injection vulnerability in the 'advanced/curl' com…8.1
• CVE-2026-50980Cross-Site Scripting (XSS) vulnerability in the DNS lookup/m…6.1
• CVE-2026-50986PrestaShop module, totadministrativemandate <1.8.1 is vulner…8.8
• CVE-2026-5100The AWP Classifieds plugin for WordPress is vulnerable to SQ…7.5