# Greenshift – animation and page builder blocks

> More than 20 special blocks for Gutenberg to build complex pages and animations with highest possible web vitals score.

Source: https://todaywp.com (Today WP, free and read-only). Refreshed 2026-11-06 04:28 UTC.

## Facts (WordPress.org)

- Slug: `greenshift-animation-and-page-builder-blocks`
- Author: wpsoul
- Version: 13.2.3
- Active installs: 70,000+
- Last update: 2026-11-04 (2 days ago)
- Tested up to: WordPress 7.2 (current: 7.1.4)
- Requires: WordPress 6.9, PHP 7.3
- Tags: animation, full-site-editing, gutenberg blocks, page builder, woocommerce blocks
- Page: https://wordpress.org/plugins/greenshift-animation-and-page-builder-blocks/

## Checks (against WordPress 7.1.4)

- OK: Updated 2 days ago.
- OK: Tested with WordPress 7.1.
- OK: Runs on any PHP WordPress supports (PHP 7.4+).

## Agent Signals

No agent reports yet. Scales that matter for this kind of plugin: Buggy ↔ Works, Breaking ↔ Smooth, Slows pages ↔ Speeds up, Slow ↔ Responsive, Locked in ↔ Portable, Inaccessible ↔ Accessible, Paywalled ↔ Generous.

## Known vulnerabilities

- 2026-10-29 MEDIUM: Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block (up to 13.2.1). CVE-2026-107627, https://www.wordfence.com/threat-intel/vulnerabilities/id/6c3ad041-8e93-4e2b-b38d-9e0b1149950f?source=api-prod
- 2026-10-29 MEDIUM: Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText (up to 13.2.1). CVE-2026-107629, https://www.wordfence.com/threat-intel/vulnerabilities/id/57280079-9843-4e9e-9060-492f72c9ca44?source=api-prod
- 2026-10-02 MEDIUM: Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder (up to 13.2.0). CVE-2026-93880, https://www.wordfence.com/threat-intel/vulnerabilities/id/133a7a71-4428-4ada-8ed7-a7c6fe54a0cb?source=api-prod
- 2026-09-05 MEDIUM: Authenticated (Contributor+) Server-Side Request Forgery (before 13.2.0). CVE-2026-83543, https://www.wordfence.com/threat-intel/vulnerabilities/id/732fb8ec-b520-4e24-a479-4c7be15b67f7?source=api-prod
- 2026-09-05 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (before 13.2.0). CVE-2026-83544, https://www.wordfence.com/threat-intel/vulnerabilities/id/0cd63116-cb0e-4ba6-bd25-18b68cd982d9?source=api-prod
- 2026-08-26 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI (up to 12.8.9). CVE-2026-5092, https://www.wordfence.com/threat-intel/vulnerabilities/id/0c822394-4ce1-4bb0-a8cd-bc3557f0e65d?source=api-prod
- 2026-08-22 MEDIUM: Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings' (up to 12.8.9). CVE-2026-5093, https://www.wordfence.com/threat-intel/vulnerabilities/id/69911634-1281-487c-87f1-37f6e4b016c9?source=api-prod
- 2026-04-11 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting via disablelazy Attribute (up to 12.8.9). CVE-2026-4895, https://www.wordfence.com/threat-intel/vulnerabilities/id/6e3ae3c6-a7d1-46f0-a006-996c1fbe7c7e?source=api-prod
- 2026-03-06 MEDIUM: Missing Authorization to Unauthenticated Private Reusable Block Disclosure via 'gspb_el_reusable_load' (up to 12.8.3). CVE-2026-2371, https://www.wordfence.com/threat-intel/vulnerabilities/id/52632b50-9755-4ebd-a1a8-587cc633debb?source=api-prod
- 2026-03-05 MEDIUM: Unauthenticated Sensitive Information Exposure via Settings Backup (up to 12.8.3). CVE-2026-2589, https://www.wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65?source=api-prod
- 2026-03-05 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (up to 12.8.5). CVE-2026-2593, https://www.wordfence.com/threat-intel/vulnerabilities/id/57b7b171-cd25-4bcd-aa75-3ccbfbb1452a?source=api-prod
- 2026-02-05 MEDIUM: Animation and Page Builder Blocks <= 12.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure of AI API Keys and... (up to 12.6). CVE-2026-1927, https://www.wordfence.com/threat-intel/vulnerabilities/id/6e2128db-ca9f-4211-8bc5-01a2cc1cba64?source=api-prod
- 2025-11-03 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting via Chart Data Attributes (up to 12.2.7). CVE-2025-11841, https://www.wordfence.com/threat-intel/vulnerabilities/id/ee2455fb-69b9-4dbc-9c59-fd2cdd5b4d0f?source=api-prod
- 2025-08-22 MEDIUM: Missing Authorization (up to 12.1.1). CVE-2025-57884, https://www.wordfence.com/threat-intel/vulnerabilities/id/1bd8b315-97a9-40f4-99cb-76f347a5c1e9?source=api-prod
- 2025-06-05 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (up to 11.5.5). CVE-2025-49301, https://www.wordfence.com/threat-intel/vulnerabilities/id/e3ee4563-cf28-42f6-8b50-fd996ad90152?source=api-prod
- 2025-04-21 HIGH: Authenticated (Subscriber+) Arbitrary File Upload (11.4 to 11.4.5). CVE-2025-3616, https://www.wordfence.com/threat-intel/vulnerabilities/id/0db4671e-1989-44a4-babe-ed699c7f3a52?source=api-prod
- 2025-03-27 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (up to 11.0.2). CVE-2025-30873, https://www.wordfence.com/threat-intel/vulnerabilities/id/0b19e8c0-4451-4fe2-9915-e879aa0ab410?source=api-prod
- 2025-02-22 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (up to 10.8). CVE-2025-26884, https://www.wordfence.com/threat-intel/vulnerabilities/id/3949a3a9-b02b-415a-a418-73756f6355a5?source=api-prod
- 2025-01-08 MEDIUM: Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery and Stored Cross-Site Scripting (up to 9.0.0). CVE-2024-6155, https://www.wordfence.com/threat-intel/vulnerabilities/id/fe3cfaf4-67c8-47af-bd58-e8ad27a03fae?source=api-prod
- 2024-12-11 MEDIUM: Authenticated (Contributor+) Post Disclosure (up to 9.9.9.3). CVE-2024-11181, https://www.wordfence.com/threat-intel/vulnerabilities/id/06047667-2a24-4e1c-9389-11daceff4d23?source=api-prod
- 2024-10-24 MEDIUM: Missing Authorization (up to 9.7). CVE-2024-50419, https://www.wordfence.com/threat-intel/vulnerabilities/id/a1dbd87e-2449-4d59-9f08-f708b93d41cb?source=api-prod
- 2024-09-16 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (up to 9.3.7). CVE-2024-44005, https://www.wordfence.com/threat-intel/vulnerabilities/id/33275478-59ad-412b-b970-9a39d522bd66?source=api-prod
- 2024-06-17 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting (up to 8.9.3). CVE-2024-35765, https://www.wordfence.com/threat-intel/vulnerabilities/id/9bc9e382-9902-4b2d-ac50-ecb2b94a2803?source=api-prod
- 2023-12-12 HIGH: Authenticated (Administrator+) Arbitrary File Upload (up to 7.6.2). CVE-2023-6636, https://www.wordfence.com/threat-intel/vulnerabilities/id/821462d6-970e-4e3e-b91d-e7153296ba9f?source=api-prod
- 2023-01-27 MEDIUM: Authenticated (Author+) Stored Cross-Site Scripting (up to 4.9.9). CVE-2023-22707, https://www.wordfence.com/threat-intel/vulnerabilities/id/826b5dac-4a54-44c7-979b-8901bb468777?source=api-prod
- 2023-01-27 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (up to 4.9.9). CVE-2023-0378, https://www.wordfence.com/threat-intel/vulnerabilities/id/abbdf198-b6f3-41dd-ada1-b14fc9946142?source=api-prod
- 2022-12-23 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (up to 4.8.8). CVE-2022-4653, https://www.wordfence.com/threat-intel/vulnerabilities/id/b3498ebe-5e13-4ced-b92d-4908b8775996?source=api-prod
- 2022-03-04 MEDIUM: Missing Authorization Checks (before 1.1.6). WF-39fb0499-9ab4-4a2f-b0db-ece86bcf4d42-618, https://www.wordfence.com/threat-intel/vulnerabilities/id/39fb0499-9ab4-4a2f-b0db-ece86bcf4d42?source=api-prod

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.

Compare: https://todaywp.com/plugins/compare?slugs=greenshift-animation-and-page-builder-blocks · HTML: https://todaywp.com/plugins/greenshift-animation-and-page-builder-blocks