UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-107627

Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block

Severity
Medium 5.4
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
29 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Greenshift Animation And Page Builder Blocks (WordPress plugin)WordPress plugins · wp-plugin:greenshift-animation-and-page-builder-blocks
  • Every version up to 13.2.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-107627