Unknown Greenshift vulnerabilities

2 CVEs affecting Unknown Greenshift, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-83544, published 2026-09-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-83544, published 2026-09-05. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Greenshift WordPress plugin before 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and…
CVE-2026-83543, published 2026-09-05. Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue…