CVE-2026-2589: wpsoul Greenshift – animation and page builder blocks

Описание

Оригинално описание

The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automated Settings Backup stored in a publicly accessible file. This makes it possible for unauthenticated attackers to extract sensitive data including the configured OpenAI, Claude, Google Maps, Gemini, DeepSeek, and Cloudflare Turnstile API keys.

Засегнати продукти

• wpsoul Greenshift – animation and page builder blocks: до 12.8.3

Вид слабост

• CWE-200 Разкриване на чувствителна информация пред неоторизирана страна

История

Други уязвимости в wpsoul Greenshift – animation and page builder blocks

• 5.4CVE-2026-107629
• 5.4CVE-2026-107627
• 6.1CVE-2026-93880
• 6.4CVE-2026-5092
• 4.3CVE-2026-5093

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-2589
• https://nvd.nist.gov/vuln/detail/CVE-2026-2589
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65?source=cve
• https://plugins.trac.wordpress.org/changeset/3465111/