The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads.
References
Configurations
Configuration 1 (hide)
|
History
28 May 2025, 17:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:greenshiftwp:greenshift_-_animation_and_page_builder_blocks:*:*:*:*:*:wordpress:*:* | |
| First Time |
Greenshiftwp
Greenshiftwp greenshift - Animation And Page Builder Blocks |
|
| References | () https://plugins.trac.wordpress.org/changeset/3270279/greenshift-animation-and-page-builder-blocks/trunk/init.php - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/0db4671e-1989-44a4-babe-ed699c7f3a52?source=cve - Third Party Advisory | |
| References | () https://plugins.trac.wordpress.org/browser/greenshift-animation-and-page-builder-blocks/trunk/init.php#L3340 - Product | |
| References | () https://plugins.trac.wordpress.org/changeset/3273212/greenshift-animation-and-page-builder-blocks/trunk/init.php - Patch | |
| References | () https://plugins.trac.wordpress.org/changeset/3276168/greenshift-animation-and-page-builder-blocks/trunk/init.php - Patch |
22 Apr 2025, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-22 05:15
Updated : 2025-05-28 17:38
NVD link : CVE-2025-3616
Mitre link : CVE-2025-3616
JSON object : View
Products Affected
greenshiftwp
- greenshift_-_animation_and_page_builder_blocks
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type